RedHook malware abuses Wireless ADB for shell access

A new version of RedHook Android malware exploits Wireless ADB to gain shell-level privileges without a computer. Group-IB analyzed the malware, which tricks users into granting Accessibility permissions, enables Developer Options, and activates Wireless Debugging. The malware then retrieves the pairing code and connects via loopback to gain UID 2000 privileges, deploying a Shizuku-based framework for privileged operations.