Security firm Kaspersky, while investigating the pre-installed Trojan Triada on budget Android devices, uncovered a firmware-level backdoor dubbed 'Keenadu' that has compromised numerous devices globally. This backdoor is embedded in the firmware prior to the device's departure from the factory, functioning at the core of the Android system, which makes it extremely challenging for users to identify. Once the device is powered on, the backdoor operates alongside system processes, ensuring its deep-rooted persistence. Attackers can remotely control the compromised devices and execute a variety of malicious activities. At present, Kaspersky has alerted the relevant manufacturers and urged users to promptly install security updates.
