New version of Triada malware target cryptos and more

[Yaunfitda]

A new version of Triada was recently discovered by Kaspersky. And per analysis, it has reported that it was able to transfer $270,000 in various cryptocurrencies already. But the numbers could be higher as this malware targets Monero.

And this is a type of clipboard malware that's why it was very easy for them to trap their victims as they could have not suspected that there are changes when they make transactions.

One way to lure their victims is offering mobile phones that are cheap but then it is laden with this malware that's why no one will suspect it initially until it was too late. And below are the capabilities of this malware:

● steal user accounts in instant messengers and social networks, in particular Telegram and TikTok;

● secretly send messages allegedly on behalf of the victim in WhatsApp** and Telegram, and also delete them to erase traces;

● steal cryptocurrency by replacing crypto wallet addresses in the required applications;

● monitor the victim’s activity in browsers and replace links;

● replace numbers during calls - to redirect the subscriber to the contact needed by the attackers;

● control SMS: intercept, send and delete messages;

● allow sending premium SMS to receive paid services;

● download and run other programs on the infected smartphone;

● block network connections, for example, to interfere with the operation of anti-fraud systems.

https://www.kaspersky.ru/about/press-releases/novaya-versiya-triada-kradyot-kriptovalyutu-akkaunty-v-messendzherah-i-podmenyaet-nomera-telefonov-vo-vremya-zvonkov

And it fits perfectly what we have learn so far in crypto, it if is too good to be true, then probably is.

So just buy your phone on authorized dealer and don't let be trap by those cheap offerings that you can find online as you could be the next victim.

[Dave1]

This got me thinking though, maybe it was not just happening when buying too good to be true offers in online?

What if this is happening also in physical stores?  In our country there are a lot of re-sellers of mobile Phone, from Apple to Samsung to the latest version of this phone. And it was reported that they are not paying taxes to the government that's why it is very cheap.

Nevertheless, it could also be possible that it could also be poison by this kind of malware already?

[Kemarit]

This got me thinking though, maybe it was not just happening when buying too good to be true offers in online?

What if this is happening also in physical stores?  In our country there are a lot of re-sellers of mobile Phone, from Apple to Samsung to the latest version of this phone. And it was reported that they are not paying taxes to the government that's why it is very cheap.

Nevertheless, it could also be possible that it could also be poison by this kind of malware already?

It's very hard to know, unless there is a report that this has been happening already in physical stores.

So far the news is all about buying phones online that is being show to be cheap or at least the price is way below the retail price. And that is where the trap is, the gamble for this criminals is that if just one or two going to install a crypto base wallet or even banking apps that they can monitor and then steal.

We have seen clipboard malware already and so with that we should really be checking the address if it is correct before sending our precious crypto.

[BIT-BENDER]

With the high cost of phone this days I am not surprised that people by their phone from Heaven knows where and they can easily fall victim of a thing like this.

But right now I think a solution to this sort of issue will be very helpful. I am not the most tech savvy person in the world but what if the phone is flashed will it still have these sort of malware issues?

[Alphakilo]

And it fits perfectly what we have learn so far in crypto, it if is too good to be true, then probably is.

So just buy your phone on authorized dealer and don't let be trap by those cheap offerings that you can find online as you could be the next victim.

There is so much peace of mind when you buy your electronic devices from authorized agents.

But I am thinking since the malware is already on the phone can it be deleted if  the user does a factory reset on the device? That is like a hard reset that may remove the programming from it.

To give another piece of advice, do not buy phones brands that are not popular. It should be your last resort if you are stuck on an island and have no other option.

[Mrbluntzy]

Nevertheless, it could also be possible that it could also be poison by this kind of malware already?

tho, you can not tell but the report says that some  phones in the stores are already infected with this malware without the sellers even knowing about it.

It's very hard to know, unless there is a report that this has been happening already in physical stores.

So far the news is all about buying phones online that is being show to be cheap or at least the price is way below the retail price.

it's not just the online stores but also in physical stores, the news says the malware can enter the phone through any of the supply chain that delivery the phone to the seller or the user.

But right now I think a solution to this sort of issue will be very helpful. I am not the most tech savvy person in the world but what if the phone is flashed will it still have these sort of malware issues?

Yes, if you flash your phone, what you are doing is to erase all the device data and the process will remove every malicious software that is secretly installed on the phone. The malware is not inbuilt on the phone but was also installed or downloaded to the storage the device they are in, that's why when you flash your phone with a new ROM, it will wipe off the malware.

There is so much peace of mind when you buy your electronic devices from authorized agents.

You are right friend but to clear your doubt that your device is safe, you can use the solution provided by Kaspersky Lab, I posted it after this comment.

"""Install security solutions immediately after purchase, such as Kaspersky for Android : it will help detect malware on the device."""

since the malware is already on the phone can it be deleted if  the user does a factory reset on the device? That is like a hard reset that may remove the programming from it.

Yes, when you do so with a new ROM you will wipe off the malware.

[btcltcdigger]

Oh yeah, the phones with pre-installed malware are a thing these days. I've seen some reports on it. And don't be fooled, these are pro scammers with big budgets.
Makes you think, how much they actually scam people for if they're able to go to these lenghts

[Mia Chloe]

But the numbers could be higher as this malware targets Monero.

I hadn't even yet read far on this post when this particular line hit me and I was like what is it with crypto hackers and scammers against those that value privacy and Decentralisation. Rationally people these days who have a ton of Monero sitting in their wallets are basically decentralization enthusiasts and privacy lovers too since getting Monero these days infact is almost a nightmare.

From the fact that the government in most countries are making it difficult to work with DEX to the fact that basically almost no CEX offers Monero either for sale or buying too. At this point it's basically safe to say it isn't an over exaggeration to improve you security constantly.

[btc_angela]

Oh yeah, the phones with pre-installed malware are a thing these days. I've seen some reports on it. And don't be fooled, these are pro scammers with big budgets.
Makes you think, how much they actually scam people for if they're able to go to these lenghts

Yeah, I wouldn't be surprised that pro scammers are willing to shell out or at least have capital to pursue this kind of scams. And they are also patience as the returns might be slow, but once everything has been setup, its like a passive income for them.

So just like what has been exposed, be careful on where we buy any items that can be installed with this kind of malwares. Specially crypto base like hardware wallets because it has been reported as well in the past similar scams like this one. Hardware wallets comes with malware and some of them are fake as well.

[cryptoaddictchie]

Oh yeah, the phones with pre-installed malware are a thing these days. I've seen some reports on it. And don't be fooled, these are pro scammers with big budgets.
Makes you think, how much they actually scam people for if they're able to go to these lenghts

Is that possible? A preinstalled malware, meaning that when it was before used theres already one inside the phone? I think if theres like that it would be on low class brand phones. Cant imagine Samsung or Apple or any famous one would have malwares that preinstalled. In any case that would be bad for anyone.

[lovesmayfamilis]

In my country, there are shops where people bring their used phones, and the sellers then sell used phones to people who cannot afford to buy a new phone. Quite a popular trade that seems very profitable to some, on the other hand, can lead to big losses and consequences. In the same way, I see many offers in online stores for selling counterfeit phones, which, I think, are also equipped with a virus filling. Therefore, of course, the proverb that says, "A miser will pay twice," more than ever justifies buying cheap things outside licensed.

Oh yeah, the phones with pre-installed malware are a thing these days. I've seen some reports on it. And don't be fooled, these are pro scammers with big budgets.
Makes you think, how much they actually scam people for if they're able to go to these lenghts

Is that possible? A preinstalled malware, meaning that when it was before used theres already one inside the phone? I think if theres like that it would be on low class brand phones. Cant imagine Samsung or Apple or any famous one would have malwares that preinstalled. In any case that would be bad for anyone.

Yes. When buying used phones, to get the best price, it is suggested to bring a box with documents. And the more complete the set the seller of the used phone brings, the more expensive he will be able to sell it. The owners of these stores disguise such phones so successfully that sometimes the next buyer has a hard time noticing the fact that the phone has already been used. The only thing that should worry you is the lower price.

[sokani]

What if this is happening also in physical stores?  In our country there are a lot of re-sellers of mobile Phone, from Apple to Samsung to the latest version of this phone. And it was reported that they are not paying taxes to the government that's why it is very cheap.

Nevertheless, it could also be possible that it could also be poison by this kind of malware already?

In most cases, before mobile phones are resold, they're flashed or subjected through factory reset to erase all stored data on it and from my own understanding, factory resetting is an effective way of getting rid of malwares from a device. Except, it's after this process the phones are infected and sold out. Well, this info by op is just an eye opener why such phones should be avoided or if one must buy them, it's good to do a factory reset before usage.

[Rustam Meraj]

Yeah, I wouldn't be surprised that pro scammers are willing to shell out or at least have capital to pursue this kind of scams. And they are also patience as the returns might be slow, but once everything has been setup, its like a passive income for them.

So just like what has been exposed, be careful on where we buy any items that can be installed with this kind of malwares. Specially crypto base like hardware wallets because it has been reported as well in the past similar scams like this one. Hardware wallets comes with malware and some of them are fake as well.

Exactly professional scammers always spend time and money to set up scams like this. They are mostly wait for returns which might be slow at first but can become regular source of income. As we have seen recently it is very important to be careful when buying things that could have malware especially products related to cryptocurrency like hardware wallets. These devices are especially can be risky and can be scammed because they are targeted before with malware and fake products. It is good tos stay alert and take necessary steps to protect yourself from becoming victim of these kinds of scams.

[Aanuoluwatofunmi]

If things like this is happening, then it sounding a warning on us that are left unaffected to know what to do quickly before such extends to us, we should understand that scam is not what we are so much used to or being common to us, they may not be what we do familiarize ourself with and the ones we do may not give us any suspiciousness for such intention, that is why we must be able to also take some precautionary measure towards the safety of what we use and things that belongs to us.

[Zwei]

So just buy your phone on authorized dealer and don't let be trap by those cheap offerings that you can find online as you could be the next victim.

shit like this is why i have trust issues buying second hand phones.

In most cases, before mobile phones are resold, they're flashed or subjected through factory reset to erase all stored data on it and from my own understanding, factory resetting is an effective way of getting rid of malwares from a device.
Except, it's after this process the phones are infected and sold out. Well, this info by op is just an eye opener why such phones should be avoided or if one must buy them, it's good to do a factory reset before usage.

nope, factory reset only delete user data, not system data, so if the phone is jailbroken with root access the malwares can be installed hidden in system files or even in the bootloader, factory reset won't do much to protect you.

Specially crypto base like hardware wallets because it has been reported as well in the past similar scams like this one. Hardware wallets comes with malware and some of them are fake as well.

exactly, that's why you should never ever buy a second hand hardware wallet or from unauthorized sellers.
but some people like playing russian roulette with their coins just to save a few bucks buying from an unauthorized sellers.

[NotATether]

So this is Android malware from what you are saying. Well in that case, it actually makes sense that these features are possible.

Literally the only way to secure Linux (not Android) right now is with SELinux, which is notorious to set up, but you can reap big rewards from it if you can get your applications working with it as is basically destroys 95% of all malware on the spot like Apple's walled garden. Better than an anti-virus. No wonder why the NSA recommends it.