Certain Leagoo and Nomu handsets are reportedly affected.
A security report from Dr. Web, a Russian anti-malware company, has uncovered that certain Chinese smartphones are infected with the Triada Trojan malware. Based on the findings, the trojan comes preloaded into the devices via firmware. The Triada malware was discovered on several mobile handsets, including Leagoo M5 Plus, Leagoo M8, Nomu S10, and Nomu S20.
“Triada is embedded into the source code of the library. It can be assumed that insiders or unscrupulous partners, who participated in creating firmware for infected mobile devices, are to be blamed for the dissemination of the trojan,” according to the Dr. Web researchers.
“Since Triada is embedded into one of the libraries of the operating system and located in the system section, it cannot be deleted using standard methods. The only safe and secure method to get rid of this trojan is to install clean Android firmware,” they added.
According to SecurityWeek, the security firm’s researchers warned that Triada can be used to “run malicious plugins to steal confidential information and bank credentials, to run cyber-espionage modules, or intercept messages from social media clients and messengers.”
Dr. Web has already informed Leagoo, Nomu and the other manufacturers of the security issue. Affected users are advised to install the necessary OTA updates from their smartphone manufacturers to combat the malware.
