A new threat to Android devices: This virus takes over your phone and clicks on ads without your knowledge.
Following the discovery of new malware that has infected thousands of devices around the world, Android phone security has once again become a major topic of discussion.. Known as Keenadu , this malware had infected over 13,000 devices by February 2026 in countries including Russia, Japan, Germany, Brazil, the Netherlands, Spain, the United Kingdom, France, and Italy.
According to Kaspersky cybersecurity firm Keenadu, this type of computer virus is designed primarily to generate profit through advertising fraud. It works by using an infected phone as an automated program, clicking on ads without the user's knowledge.
In this way, criminals generate illicit income, knowing that some versions of the software are more dangerous, as they allow complete control over the device. Experts have discovered that the Keenadu software may be pre-installed on the device's internal system, known as its firmware.
This means the problem could arise at some stage of the manufacturing or distribution process. When the virus is embedded in this way, it acts as a backdoor, giving attackers unrestricted access to the phone: they can install apps without permission, change settings, and access personal data such as messages, photos, location, and even bank account information.
One of its unique features is that its behavior depends on the phone's settings. For example, it will not activate if the language is set to Chinese dialects or if the time zone is set to China, and it will not work on devices that do not have the Google Play Store or Google Play services.
In addition to being integrated into the system, the malware was also found within the phone's own applications, such as facial recognition or home screen apps. Furthermore, in other cases, it was distributed through apps available on the official app store, particularly smart home camera apps, which had been downloaded over 300,000 times before being removed.
Kaspersky experts recommend keeping your device updated, using security solutions to remove malware, and scanning for any suspicious applications. Additionally, if a system application is found to be infected, it should be stopped and disabled.