Back Cybersecuritynews

ResidentBat Android Malware Provides Belarusian KGB with Persistent Access to Mobile Devices

Cybersecuritynews •Tushar Subhra Dutta • February 26, 2026

A newly documented Android spyware called ResidentBat has been linked to the Belarusian KGB, giving state operators deep and persistent access to the mobile devices of journalists and civil society members. First publicly reported in December 2025 through a joint investigation by Reporters Without Borders (RSF) and RESIDENT.NGO, the malware’s code history suggests it was quietly developed […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ResidentBat Malware Linked to Belarusian KGB Targets Mobile Devices A new Android spyware named ResidentBat has been connected to the Belarusian KGB, enabling state operators to maintain persistent access to the mobile devices of journalists and civil society members. The malware was first reported in December 2025 following a joint investigation by Reporters Without Borders and RESIDENT.NGO, indicating a sophisticated development process aimed at surveillance. 3 sources 33

Extracted Entities

ResidentBat Android Malware Provides Belarusian KGB with Persistent Access to Mobile Devices

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)