RedHook malware abuses Wireless ADB for shell access

A new version of the RedHook Android malware abuses Wireless ADB to gain shell-level privileges without a rooted device. It tricks users into granting Accessibility permissions, enables Developer Options and Wireless Debugging, then pairs with the phone's ADB service via loopback. The malware deploys a Shizuku-based framework to execute 53 server-issued commands, including screen streaming, keystroke interception, and silent app installation.