Recently, Google has alerted Android users to Arsink, a dangerous Remote Access Trojan (RAT) infecting over 45,000 devices. Disguised as "modded" apps like WhatsApp or TikTok, it uses Google cloud services to steal SMS (including OTPs) and record audio. To stay safe, enable Play Protect and avoid sideloading apps.