A recent warning has emerged highlighting potential data loss risks for Android phone users due to pre-installed malware. Kaspersky security researchers have identified a new variant of spyware called Triada embedded in the firmware of numerous budget Android devices that mimic popular models. This malware has the capability to infiltrate system processes, compromise sensitive data, and manipulate users’ digital assets.
Triada is recognized as a modular remote access trojan (RAT) and has been a concern in the cybersecurity realm. The concerning aspect of this latest version is that it is pre-installed in the phone’s firmware, making it exceedingly difficult for users to detect and remove. It can execute a variety of malicious activities, including reading and sending messages on platforms like WhatsApp and Telegram, hijacking social media accounts, stealing cryptocurrencies, and tracking users’ online activities.
Cybersecurity experts suggest that the individuals responsible for this threat may be the developers or distributors of counterfeit phones. Dmitry Kalinin from Kaspersky Lab indicated that the malware might have been integrated during the manufacturing process, leaving retail outlets unaware of the issue.
Alarmingly, cybercriminals have reportedly used Triada to steal approximately $270,000 in cryptocurrency from victims’ wallets, and this figure could be higher due to the inclusion of Monero, an untraceable cryptocurrency.
Between March 13 and 27, over 2,600 users, mainly in Russia, were affected by Triada. While Kaspersky asserts that its mobile antivirus software can detect this malware, it is important to note that the company’s products are prohibited in the United States due to connections with Russia.
As a precaution, it is strongly advised to avoid purchasing cheap Android phones from unknown sources. For those who must buy such devices, it’s crucial to conduct thorough research and install reliable antivirus software to mitigate the risk.