APMonitor. I watch the watchers. And something watched you first.
The terminal hesitated. Then:
It opened a terminal-style window. No splash screen, no UI niceties. Just a blinking cursor and a single line of text: com.mediatek.apmonitor
And it had quarantined the evidence.