Technical Analysis & Behavior
The Android package identifier 'com.uzoifhzk.qmqnpwaf' is a known indicator of compromise (IoC) for the KidsShield stalkerware spyware family. Also distributed under aliases: TiSpy, KidLogger, MonitorMinor, SelfSpy, SpyTrac, TelcadoAndroid, TiFamily, TracerSpy. Signed with developer SHA1 certificate 0D025A887A154658... Stalkerware operators intentionally disguise 'com.uzoifhzk.qmqnpwaf' as a generic Android system service, Wi-Fi updater, or battery manager so victims do not uninstall it from Settings > Apps. If 'com.uzoifhzk.qmqnpwaf' is present on your device without your knowledge, revoke its Accessibility and Device Admin privileges immediately and run a full mobile antivirus scan.