If you absolutely must test a tool like this in an isolated environment (for research only, not for customer phones):
Even if your antivirus doesn’t flag it immediately, that often means the malware is new (zero-day) or uses obfuscation to avoid detection.
