It looks like counterfeit Android devices in Russia were discovered to have the Triada malware preinstalled on them.

Triada malware infected 2,600+ Android devices via counterfeit phones in March 2025, enabling remote access and crypto theft.

Triada malware can hijack messaging apps, monitor browsing activity, and intercept and delete SMS messages, according to ...

Triada is a modular Android malware first discovered in 2016, considered a pioneer at the time for operating almost entirely in the device's RAM to evade detection. Since then, there have been ...

Kaspersky uncovers counterfeit Android smartphones preloaded with Triada malware The researchers speculate the supply chain might have been compromised More than $270,000 in crypto has already ...

Over 2,600 users have been affected by the Triada Trojan, which hijacks calls, steals crypto, and compromises messaging apps.

Thousands of counterfeit smartphones sold online at discount prices contain preinstalled crypto stealing malware, according ...

Kaspersky researchers have discovered a new strain of the Triada Trojan preinstalled on thousands of new very cheap Android ...

It is very hard to detect as it hides in the Android system and copies itself into all the phone processes.

The Android devices are sold at reduced prices but are riddled with malware. Source: Hovatek The Triada malware first surfaced in 2016 and is known for targeting financial applications and ...