The Sale of Counterfeit Phones With Crypto-Stealing Malware

Hackers are exploiting counterfeit Android smartphones by preloading them with crypto-stealing malware, particularly a variant of the Triada Trojan.

Cybersecurity firm Kaspersky has identified over 2,600 confirmed infections globally, with most victims located in Russia. These counterfeit devices, sold at reduced prices, come with Triada integrated into their firmware, granting attackers extensive control over the phones.

Triada Malware has the capability to replace cryptocurrency wallet addresses to redirect funds. It can Steal user account information and intercept SMS messages, including two-factor authentication codes.

It hijacks messaging apps and monitors browsing activity. It also downloads additional malicious payloads and manipulates device processes.

Attackers have reportedly stolen $270,000 in crypto, including Monero, which is untraceable. The actual figure may be higher.

The malware infiltrates devices during manufacturing or distribution. Some sellers may unknowingly distribute infected phones.

Infections have been reported in Russia, Brazil, Kazakhstan, Germany, and Indonesia.

To avoid falling victim to this scam users are recommended to purchase devices from reputable distributors and install robust security software immediately after purchase.

It's me, @justmythoughts, an ordinary Hive user looking to make the most of the platform. I will appreciate your support. Follow me for more. Thanks, Gracias :)