Abstract: Machine learning (ML) models for Android malware detection face escalating threats from adversarial query attacks, which iteratively perturb malware samples guided solely by model outputs.