New RedHook Malware Hacks Android Phones to Steal Banking Info

Cybersecurity experts have spotted a dangerous new version of malware named RedHook. This software is currently targeting Android users by turning their own developer tools against them. It often starts with a simple phone call or message where hackers pretend to be from a bank or government agency. They trick people into visiting fake websites that look like the Google Play Store to download malicious apps hosted on cloud servers.

Once the app is on the phone, it asks for permission to use accessibility features. If a user grants this, the malware quietly turns on hidden settings called Wireless Debugging. This gives the hackers deep access to the device without needing a computer or any extra permissions. From there, they can watch the phone screen in real time, steal passwords, and even grab lock screen codes to get into banking apps.

This version of RedHook is particularly hard to stop because it uses clever tricks to stay on the phone. It can run a tiny, invisible window or play silent audio to keep the app active in the background. If a user tries to close the program, the services just restart each other automatically. It can even regain full control after the phone is rebooted, making it a nightmare for victims to remove.