RedWing Android Spyware Sold as a Service on Telegram (infosecurity-magazine.com)

• RedWing is a MaaS distributed via Telegram, targeting banking apps.
• 82 financial institutions targeted, primarily in Russia.
• Bypasses 2FA via SMS interception and call forwarding.

"Zimperium discovered RedWing, an Android spyware sold as a service on Telegram, targeting banking apps. It uses fake overlays to steal credentials, intercepts SMS, and forwards calls to bypass 2FA. Linked to Russian threat actors."