ActReal forges time-aligned touch and six-axis IMU signals, keeping mobile automation detection at 71% evaded

arXiv·medium signalXBlueskyLinkedInCopy link

Apps detect automation using touch trajectories, action timing and the physical coupling between touch and inertial sensor data, on the assumption that a script cannot fake the accelerometer. A privileged system-level mobile agent controls both touchscreen input and what sensor data apps see, so ActReal converts semantic agent actions into task-valid touch events plus physics-guided IMU generation. Mean event-level attack success is 77.5%, and it stays at 71.1% even when detectors observe touch and IMU jointly, which retires the touch-IMU coupling check as a defense against agents running at system privilege.