Banking Trojan Found in Over 40 Models of Low-Cost Android Smartphones

[tarekma7]

Over 40 models of low-cost Android smartphones are sold already infected with the Triada banking trojan, says Dr.Web, a Russia-based antivirus vendor.

The security vendor published today a list of 42 Android models its researchers analyzed and found to be infected with the Android.Triada.231 trojan.

Triada is a very powerful Android banking trojan discovered in early 2016. It can root devices and then infect Zygote, a core Android operating system process, where it's almost impossible to remove without wiping the entire device and reinstalling the OS.

Infected smartphones sold all over the globe
Dr.Web says it found the trojan on newly shipped devices from lesser-known brands —mostly based in China— such as Leagoo, Doogee. Vertex, Advan, Cherry Mobile, and others.

"The malware is present in the devices which are sold not only in Russia but globally," a Dr.Web spokesperson told Bleeping Computer earlier today via email. "For instance, in Poland, Indonesia, China, the Checz Republic, Mexico, Kazakhstan, [and] Serbia."

Dr.Web's recent discovery isn't new, but it's a continuation of previous research. Back in July 2017, researchers found the same Triada trojan on four low-cost Android smartphone models —Leagoo M5 Plus, Leagoo M8, Nomu S10, and Nomu S20.

Researchers continued to look into the matter and eventually discovered 42 smartphone models that were coming with malware pre-installed out of the box.

Experts say that their discovery over the summer didn't deter whoever was behind this action to stop. For example, they found Triada pre-installed on Leagoo M9 phones, a model launched in December 2017.

Read the article and phone list :

HERE