Kaspersky researchers have identified a new strain of the Triada Trojan, pre-installed on counterfeit Android devices. The malware, first identified in 2016, can steal personal data and other information. It is able to impersonate users, hijack social media accounts and steal cryptocurrency. It is likely to be installed during early stages of the supply chain, hence vendors may not be aware of its presence. Between 13 and 27 March 2025, over 2,600 users worldwide have encountered this new strain, mostly in Russia.

HollowQuill Malware Attacking Government Agencies Worldwide Via Weaponized PDF Documents
The “HollowQuill” malware campaign targets academic institutions and government agencies using weaponized PDF documents to initiate infections. Advanced social engineering tactics create deceptive documents that