Kaspersky has reported the discovery of thousands of counterfeit Android smartphones sold online with preinstalled malware designed to steal cryptocurrency and other sensitive data.
Thousands of Counterfeit Phones
According to Kaspersky, counterfeit Android devices are being sold at reduced prices. These devices are infected with a version of the Triada Trojan that allows attackers almost unlimited control over the device.
Features of the Triada Trojan
Cybersecurity expert Dmitry Kalinin stated that the trojan replaces crypto wallets and intercepts messages, including two-factor authentication codes. This enables attackers to steal cryptocurrency and user accounts. The infiltration occurs at the assembly stage in the supply chain.
History and Warnings
The Triada malware first appeared in 2016, targeting financial applications and messaging apps like WhatsApp and Facebook. It spreads through phishing attacks and malicious downloads. Kaspersky experts recommend purchasing devices only from reliable distributors and installing antivirus software immediately after purchase.
Kaspersky's initiatives highlight the importance of purchasing electronics from reputable sellers and using protective software promptly to prevent cryptocurrency fraud.
