Inside BitAIM+: Reverse Engineering a Commercial Carrom Pool Cheat
A commercial Android cheat sells itself as an AI aim assistant for Carrom Pool. I pulled it apart: a rebranded VirtualApp container, YAHFA inline hooking, five hook plugins hidden as plaintext base64 inside a native library, a hand-written devirtualization of Google's PairIP protection, direct memory reads into the game's physics engine, and a paywall whose two tiers are hardcoded constructor calls. There is no AI anywhere. There is not even a physics simulation.
Android's AccessibilityService: A Single Toggle to Total Device Control
How one API designed for disability access became the foundation of a $145M surveillance industry. A proof-of-concept implant demonstrates the full attack chain: silent permission escalation in 2.4 seconds, contextual keylogging, see-through overlays, network toggle, self-hiding persistence, and an embedded Linux terminal with apt - all from a single accessibility toggle, no root required.