Android Backdoor Baohuo: 58K Devices Infected via Fake Telegram X

Security researchers at Doctor Web have uncovered a sophisticated Android backdoor, Android.Backdoor.Baohuo.1.origin, disguised as Telegram X. This malware grants cybercriminals complete control over victims’ accounts and devices, affecting over 58,000 devices globally. The backdoor spreads through malicious websites and third-party app stores, using unprecedented control mechanisms via Redis database integration. It can steal credentials, chat histories, and personal data, while concealing evidence of compromise. The malware operates through three distinct modification variants, ensuring full functionality to prevent user suspicion. Doctor Web’s analysis reveals that the attack is tailored for specific markets, with the potential to expand to additional regions.