RatHat Android malware abuses Accessibility and ADB pairing to gain shell access and retain control after uninstall.