The Shizuku app uses a unique service that allows third-party apps access to system-level Application Programming Interfaces (APIs). It achieves this through the Android Debug Bridge (ADB) interface.

New Matryosh botnet is targeting Android systems that have left their ADB debug interface exposed on the internet.

"Overall, we believe malicious code based on the Android system ADB debug interface is now actively spreading in worms and infected over 5,000 devices in 24 hours," the team says.

Discover AYA, an intuitive graphical interface for ADB that brings Android device control to everyone. Monitor performance, manage apps, and much more—no coding required!

Researchers discovered a cryptocurrency mining botnet that uses the Android Debug Bridge (ADB) Wi-Fi interface and SSH connections to hosts stored in the known_hosts list to spread to other devices.

Once finished, you'll get a confirmation screen that shows that the device driver for the "Android Composite ADB Interface" was installed.