Kaspersky has reported that counterfeit smartphone models sold at cheaper prices come preloaded with a modified version of the Android malware, Triada. Infections were recorded among over 2,600 users, predominantly in Russia, between March 13 and 27, 2025. Discovered by Kaspersky in 2016, Triada is a modular remote access trojan capable of stealing sensitive information and creating a botnet from infected devices. Initially propagated via compromised apps, it evolved to infect devices directly during the manufacturing process, raising significant security concerns.
"More than 2,600 users in different countries have encountered the new version of Triada, the majority in Russia," Kaspersky said in a report.
"Triada infects device system images through a third-party during the production process," Google noted in June 2019.
Collection
[
|
...
]