A user calls a helpdesk after a pop-up on their Android phone claims 'CRITICAL VIRUS DETECTED - Call 1-800-XXX-XXXX Immediately.' After calling the number, a 'technician' instructs the user to install TeamViewer QuickSupport to allow remote troubleshooting. What threat scenario is this?

• A.A. A legitimate antivirus app detecting a real infection
• B.D. A Google Play Protect warning that the user has mistakenly identified as a scam
• C.C. A carrier-level security alert delivered via the Emergency Alert System
• D.B. Fake tech support scam using scare-ware pop-up to trick the user into installing a remote access application, giving the attacker full device control