SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.keenadu (Back to overview)

Keenadu

Keenadu is an Android backdoor that is distributed primarily through pre-infected device firmware, as well as through malicious apps. Its capabilities include full remote control of a victim's device, ad fraud, and browser search hijacking.

References
2026-03-19 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
Android devices ship with firmware-level malware
Keenadu
2026-02-17 ⋅ Kaspersky ⋅ Kaspersky
Kaspersky discovers Keenadu – a multifaceted Android malware that can come preinstalled on new devices
Keenadu

There is no Yara-Signature yet.