Download the 47MB - 140MB APK + OBB file. Reality: Many websites use "crypters" to hide the payload. The APK may ask for "Accessibility" permissions—never grant this.

Install and deny all permissions except storage. Reality: The app may force you to enable "Install from unknown apps" for a different package (a dropper).

Uninstall official CapCut. Reality: You lose all local projects (stored in Android/data/com.bytedance.lego).