The China-linked APT GopherWhisper has been using legitimate services and various Go-based backdoors in attacks.
Android power users have relied on tools like Tasker or MacroDroid. These are IFTTT engines. They operate on rigid triggers.