In order to obtain shell-level privileges without requiring a computer connection, a new version of the RedHook Android virus takes advantage of the Android Wireless Debugging (Wireless ADB) mechanism in a unique way.
After analyzing the latest version of the mobile malware, researchers at cybersecurity firm Group-IB claim that it greatly increases its capabilities in comparison to the 2025 variant.
The malware also keeps its remote access trojan (RAT) capabilities, which enable it to automate user interface interactions, stream the screen, intercept keystrokes, and steal passwords. Google’s debugging interface, known as ADB (Android Debug Bridge), enables command-line control of an Android device.
Shell commands can be executed from a computer running the ADB client thanks to the system, which operates on an Android device as an ADB daemon.
The same functionality is offered wirelessly by Wireless ADB, which was originally included in Android 11 and eliminates the need for a USB cord to connect the devices read more about RedHook Android malware now uses Wireless ADB for shell access
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.