RedHook Android malware now uses Wireless ADB for shell access
In order to obtain shell-level privileges without requiring a computer connection, a new version of the RedHook Android virus takes advantage of the Android Wireless Debugging (Wireless ADB) mechanism in a unique way.
After analyzing the latest version of the mobile malware, researchers at cybersecurity firm Group-IB claim that it greatly increases its capabilities in comparison to the 2025 variant.
The malware also keeps its remote access trojan (RAT) capabilities, which enable it to automate user interface interactions, stream the screen, intercept keystrokes, and steal passwords. Google's debugging interface, known as ADB (Android Debug Bridge), enables command-line control of an Android device.
Shell commands can be executed from a computer running the ADB client thanks to th...