Fake Bank Apps Let Scammers Control Android Phones in Southeast Asia

A malicious Android app family called RedHook is being distributed via fake banking and service apps across Southeast Asia; scammers socially engineer victims to install the app and grant Accessibility access, which gives operators full remote control (screen reading, simulated input, camera activation, app install/remove) and exposure to banking credentials, one-time codes, and identity documents. Researchers observed the malware’s command set expand to 53 commands and noted it can enable Wireless Debugging to leverage ADB-level capabilities, with confirmed targeting in Vietnam and Indonesia.