FlagThis

A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, raising significant cybersecurity concerns. This sophisticated malware, initially identified in 2016, has evolved to embed itself deeply into the Android system framework, making it difficult for users to detect or remove. Discovered on counterfeit versions of popular smartphone models sold at discounted prices through online stores, Triada poses a severe threat as it can steal user data immediately after device setup.

Triada's capabilities include stealing user data, such as social media and messenger accounts, and manipulating cryptocurrency transactions by replacing wallet addresses. The malware can also falsify caller IDs, monitor browser activity, and even activate premium SMS services. Experts warn that this new version infiltrates the device at the firmware level, indicating a compromised supply chain and urging users to exercise caution and purchase Android devices from reputable sources.

ImgSrc: thedefendopsdia

References :

• bsky.app: A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up.
• BleepingComputer: A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up.
• The DefendOps Diaries: Explore the threat of Triada malware in counterfeit Android devices and learn how to protect against this sophisticated cyber threat.
• BleepingComputer: A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up.
• www.it-daily.net: Triada Trojan discovered on counterfeit Android smartphones
• PCMag UK security: Counterfeit Android Phones Preloaded With a Special Surprise: Malware
• Sam Bent: Triada Malware Preloaded on Counterfeit Androids Hijacks 2,600+ Devices for Crypto Theft and Espionage
• www.scworld.com: Updated Triada trojan compromises thousands of Android devices
• securityaffairs.com: New Triada Trojan comes preinstalled on Android devices
• The Hacker News: Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices
• Cyber Security News: Trinda Malware Infects Android Devices to Manipulate Phone Numbers During Calls
• Cyber Security News: New Triada Malware Attacking Android Devices to Replaces Phone Numbers During Calls
• www.techradar.com: Dodgy Android smartphones are being preloaded with Triada malware

Classification:

• HashTags: #AndroidSecurity #TriadaTrojan #MobileSecurity
• Company: Dr.Web
• Target: Android Users
• Product: Android
• Feature: Malware pre-installation
• Malware: Triada
• Type: Malware
• Severity: Major