Hanoi Police Warn of Dangerous Malware Strains Targeting Officials

• •RedHook spyware targets Android devices, exploiting Accessibility Services for control.
• •StormEncryptor ransomware targets Windows systems, leveraging CVE-2026-18577 for access.
• •Both malware strains pose serious risks to officials' mobile devices and organizational networks.

Hanoi City Police have identified two particularly dangerous malware strains, RedHook spyware and StormEncryptor ransomware, which are being exploited by hacker groups to attack information systems and mobile devices of officials and civil servants. RedHook, discovered in early August 2026, targets Android devices through fake SMS and messaging apps, gaining control via Accessibility Services and enabling data theft and unauthorized banking transactions. StormEncryptor, identified on August 11, 2026, targets Windows Server and Client systems within organizations, exploiting CVE-2026-18577 to gain administrative control through compromised remote management tools. Both malware strains pose significant risks to cybersecurity and information security in the region. The situation is ongoing, with authorities urging vigilance and prompt action against potential infections.