Triada malware can hijack messaging apps, monitor browsing activity, and intercept and delete SMS messages, according to Kaspersky researchers.
April 2, 2025 By Michael Kan
A strain of malware has been lurking on counterfeit Android phones as preinstalled software.
Antivirus provider Kaspersky discovered the malware embedded in the phones’ firmware, which functions as a set of instructions to control the hardware components and boot up software.
“The malware operates undetected and grants attackers’ full control over infected devices,” Kaspersky warned, after discovering the threat infecting over 2,600 users.
The malware, known as Triada, first emerged in 2016 and has been preloaded on cheap Android phones before. In this case, Triada was found circulating on counterfeit versions of popular smartphones sold in Russia, Brazil, Kazakhstan, Germany, and Indonesia.
