RedWing is a new Android malware operation offered as a subscription-based service on Telegram, enabling criminals to steal banking credentials and intercept one-time codes. It is a variant of Oblivion and uses fake app-store pages, permission abuse, and on-device fraud techniques.