Back to AppScamRadar
Critical THREAT

com.qwertyuiop.asdfghjkl — Disguised OneSpy Stalkerware Package

Technical Analysis & Behavior
The Android package identifier 'com.qwertyuiop.asdfghjkl' is a known indicator of compromise (IoC) for the OneSpy stalkerware spyware family. Also distributed under aliases: OneMonitar, OneSpy, ChyldMonitor. Signed with developer SHA1 certificate E458DC7CD8928A41... Stalkerware operators intentionally disguise 'com.qwertyuiop.asdfghjkl' as a generic Android system service, Wi-Fi updater, or battery manager so victims do not uninstall it from Settings > Apps. If 'com.qwertyuiop.asdfghjkl' is present on your device without your knowledge, revoke its Accessibility and Device Admin privileges immediately and run a full mobile antivirus scan.
Package ID / SHA256 Hash
com.qwertyuiop.asdfghjkl
Threat Family
Stalkerware IoC (OneSpy)
Target Platform
Android Hidden System Package
Date Logged
2026-10-17

Device Compromised? Scan & Protect Your Identity

If you installed or interacted with this APK, your credentials, 2FA codes, and banking apps may be exposed. Activate real-time mobile antivirus protection immediately.

🛡️ Activate Surfshark Antivirus & Alternative ID 🔒 Cloud APK Sandbox — Coming Soon