RedHook Android RAT Abuses ADB Wireless Debugging to Gain Shell

Cybersecuritynews •Tushar Subhra Dutta • July 9, 2026

A resurfaced Android banking trojan called RedHook has returned with a dangerous new trick, hijacking a legitimate developer feature to quietly seize deep control of infected phones. Rather than relying on complex exploits, the malware weaponizes ADB Wireless Debugging, a tool built for app developers, to grant itself privileges normally reserved for system-level processes. This […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RedHook RAT Exploits ADB Wireless Debugging for Deeper Android Control RedHook, an Android Remote Access Trojan first identified in July 2025, has re-emerged with enhanced capabilities. It now autonomously abuses Android's ADB Wireless Debugging feature to gain shell-level privileges, allowing it to manipulate devices more effectively. The malware retains its original toolkit, which includes screen streaming, keylogging, and credential theft. This new method bypasses traditional security measures by leveraging legitimate developer tools. Users of Android devices are particularly at risk, as the malware can operate without complex exploits. The current status indicates that RedHook is actively being distributed, posing a significant threat to Android security. Security professionals are advised to monitor for signs of this malware and implement protective measures. 3 sources 65

Extracted Entities

RedHook Android RAT Abuses ADB Wireless Debugging to Gain Shell

The full story

Extracted Entities

Attack Types (2)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)