Kaspersky: Cheap Android phones are available with cryptocurrency-stealing malware pre-installed

Odaily Planet Daily News Cybersecurity company Kaspersky reported in a recent analysis that Triada Trojan virus has evolved into one of the most complex and dangerous Android threats because it is able to infiltrate every process on a smartphone. In the latest version, hackers have deeply implanted malware into the system framework of knockoff smartphones, making it extremely difficult to detect and delete. Some cheap Android phones currently on sale are pre-installed with malware that specifically attacks unsuspecting Android users-stealing cryptocurrencies, replacing phone numbers during calls, and hijacking their social media accounts. The report said that between March 13 and 27, 2025, more than 2,600 users encountered the Trojan, which gave attackers "almost unlimited control" over their smartphones. The malware can steal user credentials from messaging apps such as Telegram and TikTok, replace crypto wallet addresses, and even hijack victims' communications by sending messages on their behalf. (Decrypt)