Security company: Hackers are selling fake Android phones with pre-installed cryptocurrency stealing malware
Cybersecurity company Kaspersky said it found thousands of fake Android smartphones sold online with malware pre-installed with malware designed to steal cryptocurrency and other sensitive data, according to Coinjie.com. These low-priced Android devices are filled with a variant of the Triada Trojan virus that infects all processes and gives attackers "almost complete control" of the device. Once an attacker accesses the device through the Trojan virus, he can replace the wallet address to steal cryptocurrency. In addition, the virus can steal user account information and intercept sending and receiving text messages, including two-factor authentication text messages. So far, there have been 2,600 confirmed infection cases related to this scam in different countries, and most Russian users were "infected" in the first three months of 2025. To avoid being a victim of such scams, it is best practice to buy equipment only from legal dealers and install a security solution immediately after purchase.