More than 10 thousand Android devices are already compromised by RedWing.
According to F6, from mid-July to mid-September 2026 in Russia, this trojan infected more than 10,000 smartphones. It is distributed via Telegram under the guise of apps and even ordinary video files.
After installing RedWing, it asks for access to “Accessibility.” And that’s where it gets worst: once it has Accessibility, it can control the phone, read SMS, intercept PIN codes and passwords, see the screen, use the camera and microphone, and also attack banking and cryptocurrency apps.
The particularly unpleasant detail: after obtaining the necessary permissions, the trojan attempts to hide from the user and make removal harder.
I generally believe that today a smartphone should be treated almost like a bank branch in your pocket. Once you grant it access, you potentially grant access right away to the bank, exchange, email, and messengers.
So “it’s just a Telegram video” is no longer an argument. If you want to dig into crypto risks that start far beyond the blockchain, follow @MoonMan567
According to F6, from mid-July to mid-September 2026 in Russia, this trojan infected more than 10,000 smartphones. It is distributed via Telegram under the guise of apps and even ordinary video files.
After installing RedWing, it asks for access to “Accessibility.” And that’s where it gets worst: once it has Accessibility, it can control the phone, read SMS, intercept PIN codes and passwords, see the screen, use the camera and microphone, and also attack banking and cryptocurrency apps.
The particularly unpleasant detail: after obtaining the necessary permissions, the trojan attempts to hide from the user and make removal harder.
I generally believe that today a smartphone should be treated almost like a bank branch in your pocket. Once you grant it access, you potentially grant access right away to the bank, exchange, email, and messengers.
So “it’s just a Telegram video” is no longer an argument. If you want to dig into crypto risks that start far beyond the blockchain, follow @MoonMan567
