Malware
RedWing
- First Reported
- Jul 7, 2026
- Latest Reported
- Jul 8, 2026
Reported Context (2)
- RedWing is a new Android spyware MaaS promoted through Telegram, with phishing-based distribution, customizable droppers, and strong links to Russian threat actors. RedWing Android Spyware Offers Custom Droppers and Remote Control as a Service
- RedWing is a Telegram-rented Android bank-fraud service that helps criminals hijack phones, steal banking credentials, capture one-time codes, and control calls, screens, and devices in real time. RedWing MaaS Rents Android Banking-Fraud Malware Through Telegram
Malware (4)
MITRE ATT&CK (24)
Vendors (1)
Products (8)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.