Cybersecurity company Kaspersky said it had found thousands of fake Android smartphones sold online pre-installed with malware designed to steal cryptocurrency and other sensitive data, Internet reports. These low-priced Android devices are filled with a variant of the Triada Trojan virus that infects all processes and gives attackers "almost complete control" of the device. Once an attacker accesses the device through the Trojan virus, he can replace the wallet address to steal cryptocurrency. In addition, the virus can also steal user account information and intercept sending and receiving text messages, including dual-factor authenticated text messages. So far, there have been 2600 confirmed infection cases related to this scam in different countries, with most Russian users "caught" in the first three months of 2025. To avoid falling victim to such scams, the best practice is to purchase equipment only from legitimate dealers and install security solutions immediately after purchase.