New Android Virus Steals Telegram Accounts and Cryptocurrencies

A new Triada Trojan program infects Android smartphones sold in unofficial stores. This virus modification gives attackers almost complete control over the device, allowing them to steal cryptocurrency, accounts in popular messengers and social networks such as Telegram and TikTok.  

From June 2024 to March 2025, more than 2 600 users worldwide were affected by the new version of Triada. Attackers have already transferred about $270 000 in various cryptocurrencies to their crypto wallets. Still, this amount could be significantly higher: for example, transactions in cryptocurrencies such as Monero are simply impossible to track.  

Numerous fakes of well-known models often sold at large discounts in online stores are at risk. Attackers inject the virus at one of the supply stages, so even sellers may not know about malware on devices.  

Security experts recommend using messengers with two-factor authentication and end-to-end (E2E) encryption to better protect your data. In Gem Space, for example, these functions are essential to ensure additional security of correspondence and personal user data.