{"id":214808,"date":"2026-02-18T05:52:00","date_gmt":"2026-02-18T10:52:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/18\/android-devices-compromised-by-hidden-backdoor-in-official-firmware\/"},"modified":"2026-02-18T06:10:09","modified_gmt":"2026-02-18T11:10:09","slug":"android-devices-compromised-by-hidden-backdoor-in-official-firmware","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/18\/android-devices-compromised-by-hidden-backdoor-in-official-firmware\/","title":{"rendered":"Android devices compromised by hidden backdoor in official firmware"},"content":{"rendered":"

Android devices compromised by hidden backdoor in official firmware<\/a><\/p>\n

https:\/\/www.computing.co.uk\/news\/2026\/security\/android-devices-compromised-by-keenadu-backdoor-hidden-in-official-firmware<\/a><\/p>\n

Publish Date: 2026-02-18 05:52:00<\/a><\/p>\n

Source Domain: www.computing.co.uk<\/a><\/p>\n

Keenadu can bypass Android’s security protections and compromise every application on the device<\/h2>\n

A new strain of Android malware capable of taking full control of infected devices has been discovered embedded in tablet firmware and distributed through signed over-the-air updates.<\/strong>\n <\/p>\n

Security firm Kaspersky said the malware, dubbed Keenadu, was found inside system software used by multiple device brands.<\/p>\n

Because it is integrated into core components of the operating system, the malicious code can bypass Android’s security protections and compromise every application on the device.<\/p>\n

Researchers say the most powerful version of Keenadu is built directly into firmware images, meaning some devices may be infected before they reach users.<\/p>\n

As of February 2026, Kaspersky had confirmed around 13,000 infected devices, with cases reported in Russia, Germany, Japan, Brazil and the Netherlands.<\/p>\n

Firmware-level threat<\/strong><\/h3>\n

Unlike typical malicious apps that rely on users granting permissions, the firmware-based Keenadu variant operates inside a core Android system library. This allows it to run within the context of every application on the device.<\/p>\n

Kaspersky said the backdoor could install or modify apps without the user’s knowledge; grant those apps any permission available on the device; access messages, photos, banking data and location; and monitor searches typed into the Chrome browser, even in incognito mode.<\/p>\n

“Keenadu is a fully functional backdoor that provides the attackers with unlimited control over the victim’s device,” the company said.<\/p>\n

Researchers identified several ways the malware spreads, including:<\/p>\n