As cited
Copy frozen at (site build).
RedWing Android Spyware Sold as a Service on Telegram
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
RedWing Android Spyware Sold as a Service on Telegram
Zimperium identified RedWing, an Android spyware distributed as a service through Telegram channels, designed to target banking applications. The malware appears to be offered on a subscription or rental basis to threat actors seeking to compromise financial accounts.
Why it matters: Mobile banking users and financial institutions face risk from this readily available spyware; security teams should monitor for RedWing indicators of compromise (IOCs) and ensure endpoint detection and response (EDR) coverage includes Android threats.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
RedWing Android Spyware Sold as a Service on Telegram
Zimperium identified RedWing, an Android spyware distributed as a service through Telegram channels, designed to target banking applications. The malware appears to be offered on a subscription or rental basis to threat actors seeking to compromise financial accounts.
Why it matters: Mobile banking users and financial institutions face risk from this readily available spyware; security teams should monitor for RedWing indicators of compromise (IOCs) and ensure endpoint detection and response (EDR) coverage includes Android threats.
- Source published
- First seen by Cybersecurity Tracker