Back Cybersecuritynews

Keenadu Android Backdoor Infects Firmware, Spreads via Google Play for Remote Control Access

Cybersecuritynews •Guru Baran • February 17, 2026

A sophisticated new Android backdoor that infects device firmware at the build stage and spreads through Google Play apps, enabling attackers to seize remote control over victims’ tablets and phones. Published on February 16, 2026, their detailed analysis reveals how this threat mirrors the Triada Trojan by hooking into the Zygote process, compromising every launched […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Keenadu Android Backdoor Infects Firmware via Google Play Apps The Keenadu Android backdoor has been identified as a sophisticated threat that infects device firmware during the build stage and spreads through apps on Google Play. This malware enables attackers to gain remote control of victims' devices, similar to the Triada Trojan, by hooking into the Zygote process, affecting all launched applications. Users of Android devices are particularly at risk from this vulnerability. 25 sources 52

Extracted Entities

Keenadu Android Backdoor Infects Firmware, Spreads via Google Play for Remote Control Access

The full story

Extracted Entities

Attack Types (1)

Malware (2)

MITRE ATT&CK (1)

Platforms (1)