PANews reported on April 3 that according to Cointelegraph, cybersecurity company Kaspersky said it had found thousands of fake Android smartphones sold online pre-installed with malware designed to steal cryptocurrencies and other sensitive data. These low-priced Android devices are full of a variant of the Triada Trojan virus, which can infect all processes, giving attackers "almost complete control" of the device. Once an attacker accesses the device through the Trojan virus, they can replace the wallet address to steal cryptocurrencies. In addition, the virus can also steal user account information and intercept text messages, including two-factor authentication text messages. So far, there have been 2,600 confirmed cases of infection related to this scam in different countries, most of which were Russian users in the first three months of 2025. To avoid falling victim to such scams, the best practice is to purchase devices only from legitimate dealers and install security solutions immediately after purchase.