Back Feeds2.Feedburner

Firmware

Feeds2.Feedburner •Zeljka Zorz • February 17, 2026

A new Android backdoor embedded directly in device firmware can quietly take control of apps and harvest data, Kaspersky researchers found. The malware, named Keenadu, was discovered during an investigation into earlier Android threats and appears to have been inserted during the firmware build process, not after devices reached users. How the backdoor works The research team said they found the backdoor code in the firmware of Android-based tablets belonging to several brands. “The … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Keenadu Android Backdoor Infects Firmware via Google Play Apps The Keenadu Android backdoor has been identified as a sophisticated threat that infects device firmware during the build stage and spreads through apps on Google Play. This malware enables attackers to gain remote control of victims' devices, similar to the Triada Trojan, by hooking into the Zygote process, affecting all launched applications. Users of Android devices are particularly at risk from this vulnerability. 25 sources 52

Extracted Entities

Firmware

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)