ADB, the Android Debug Bridge, is a developer tool used to communicate with an Android device over USB or wireless debugging. ADB shell is the command-line interface it opens on the device, often with enough privilege to inspect files, run commands, and manage apps on a paired phone.
In cyber security, ADB matters because it can turn a trusted device into a remote control target. Attackers do not need to break Android’s sandbox if they can persuade a victim to enable debugging, approve a pairing request, or expose a paired session. Once that trust is granted, ADB shell can support app installation, configuration changes, data collection, or other post-exploitation actions.
Defenders should keep debugging disabled unless needed, revoke unknown pairings, and treat any unexpected prompt for wireless debugging or developer options as suspicious. In malware investigations, ADB access can also indicate a broader compromise than a simple rogue app.