What is a fake antivirus app on mobile platforms, and what specific permissions or behaviors should alert users?

• A.A. Fake antivirus apps are distinguishable from real ones because they fail to obtain the SCAN_FOR_VIRUSES system permission required by all legitimate security software
• B.C. Legitimate antivirus apps and fake ones both request identical permissions; only third-party lab certifications distinguish them
• C.B. Fake mobile antivirus apps display alarming (fake) virus detection alerts to pressure users into purchasing premium versions, granting dangerous permissions (Accessibility Service, Device Admin, notification access), or providing credit card details; red flags: apps claiming to find multiple viruses on a freshly installed device, excessive permission requests (accessibility, notification listener, device admin), high subscription prices, newly created developer accounts, requests to install additional apps, and poor grammar in alerts