Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices
It has been discovered that a modified version of the Android virus Triada is downloaded on counterfeit copies of well-known smartphone brands that are offered at discounted costs.
According to a research by Kaspersky, the new version of Triada has been used by over 2,600 individuals worldwide, with the majority of those users being in Russia. The period of infection observation was March 13–27, 2025.
The Russian cybersecurity firm initially identified the modular Android malware family, known as Triada, in March 2016. It is a remote access trojan (RAT) that can recruit compromised devices into a botnet for other nefarious purposes and steal a variety of private data.
As part of a prevalent fraud scheme known as BADBOX, which has taken advantage of hardware supply chain breaches ...