Researchers discovered a cryptocurrency mining botnet that uses the Android Debug Bridge (ADB) Wi-Fi interface and SSH connections to hosts stored in the known_hosts list to spread to other devices.

Relatedly, wireless debugging via a convenient QR code scanning pair method (for Android 11 and later) was also added, though some developers have been running into issues with it.