If you use an Android phone, a silent threat may have been sitting inside your device for months. Not a virus you downloaded.

A malware, called “Sturnus,” has emerged, and it exploits Android’s accessibility features to spread on your phone even without you noticing. It gains access to your Android after being installed via ...