Counterfeit Android phones are hiding pre-installed malware that can infect every system process.
Kaspersky researchers have discovered a new strain of the Triada Trojan preinstalled on thousands of new counterfeit Android devices.
The malware is embedded in an infected phone's firmware, operating without detection and granting attackers full control over a device.
Triada can perform various malicious actions, including stealing sensitive data, hijacking social media accounts, and replacing crypto wallet addresses.