Millions of Android devices, including budget smartphones, smartwatches, and smart TVs, are being shipped with info stealer malware pre-installed, according to cybersecurity firm Trend Micro. The malware is being installed by third-party firmware suppliers, who are offering “silent plugins” to manufacturers to remain competitive as the price of mobile phone firmware drops. These plugins, some of which are sold on dark web forums and even marketed on mainstream social media platforms, can steal sensitive information, take control of social media accounts, and use devices for ad and click fraud.
