Keenadu Android Backdoor Linked to Major Mobile Botnet Activity

Kaspersky researchers reported that the Keenadu Android backdoor was used to compromise tablet devices and showed technical links to several major Android botnets. The malware was described as a multifunctional implant capable of taking control of infected devices, with analysis indicating overlaps in infrastructure, development patterns, and behavior with broader mobile botnet operations.

The report said the findings tied Keenadu to an ecosystem of Android malware that has targeted mobile users through persistent backdoor access and botnet-style command-and-control activity. By connecting Keenadu to established Android threat activity, the research highlighted how mobile malware operators can reuse tooling and infrastructure across campaigns to expand infections and maintain remote access on compromised devices.