Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates
According to recent research from Kaspersky, a new Android backdoor that is deeply ingrained in the software of the device may remotely control its behavior and secretly collect data.
According to the Russian cybersecurity vendor, the hack happened during the firmware build phase and the backdoor, known as Keenadu, was found in the firmware of devices connected to multiple manufacturers, including Alldocube.
The Alldocube iPlay 50 mini Pro firmware from August 18, 2023 contains Keenadu. The backdoor is always integrated into the firmware of the tablet, and the firmware files contain legitimate digital signatures. The other merchants' names were kept a secret.
In a thorough investigation released today, security researcher Dmitry Kalinin stated that the corrupted firmware was fre...