RedHook Android malware hijacks phones through wireless debugging
Security researchers warn that the RedHook Android malware hijacks phones by social engineering users to sideload a malicious app and enable Accessibility, then exploits Wireless Debugging to gain shell-level access, allowing it to monitor the screen, log keystrokes, install or remove apps, and control settings with overlays—without full root access—making it harder to remove; users should avoid unknown APKs, verify callers, keep Play Protect enabled, and apply updates or factory resets if infected.