From Cointelegraph
April 3, 2025 12:22 am:

Cybersecurity firm Kaspersky discovered counterfeit Android smartphones with preinstalled malware aimed at stealing crypto and sensitive data. The Triada Trojan gives attackers control over devices, allowing them to steal cryptocurrency and more. Kaspersky found 2,600 infections, mostly in Russia, in the first three months of 2025. The Triada malware targets financial and messaging apps, delivered through malicious downloads and phishing campaigns. To avoid falling victim, only buy from legitimate distributors and install security solutions immediately. Other malware targeting crypto users include Crocodilus and a new remote access trojan targeting Google Chrome wallet extensions.

Read more at Cointelegraph: Hackers are selling counterfeit phones with crypto-stealing malware