Russia Ranks Second Globally for Smartphones with Preinstalled Malware

According to a report by Trend Micro, Russia has taken the second spot in the world for the number of smartphones infected with preinstalled malicious software. Approximately 16,100 devices in Russia have been affected by this issue. Experts note that this is only an estimated figure, and the actual number could be much higher. For example, websites offering illegal services claim to control as many as 116,300 smartphones.

How the Malware Works

The malicious software exploits users’ smartphones to provide various illegal services, particularly those involving SMS-based account verification. Trend Micro has identified a Telegram channel that offers fake accounts for use in car-sharing services. In the event of an accident, the owner of the infected phone—not the actual perpetrator—would be held responsible for damages and liability.

How Malware Gets Installed

Experts warn that such malware can be intentionally embedded at the manufacturing stage. All it takes is a single insider at the factory with access to the software. The virus can be integrated into the device’s firmware, making it impossible to remove even with a factory reset.

Wider Impact Beyond Car-Sharing Services

The threat is not limited to car-sharing platforms. If criminals gain access to a phone number and the content of SMS verification messages, they can also target taxi aggregators, various online marketplaces, and most banks.

Expert Recommendations

Experts strongly advise against using services that rely on SMS as a method of authentication, as this increases the risk of falling victim to such attacks.