RedWing: A Mobile Malware-as-a-Service Operation

RedWing is a sophisticated Android Malware-as-a-Service platform, linked to Russian threat actors and distributed via Telegram, that enables even novice attackers to remotely compromise, surveil, and control mobile devices—evading detection and targeting financial credentials at scale through phishing, overlays, and live device manipulation.