Chinese Android Phones Ship with Malware-Infested WhatsApp and Telegram Apps, Targeting Crypto Users via S24 Ultra and Note 13 Pro Models

Since June 2024, low-cost Android smartphones from Chinese manufacturers, including models branded as 'S24 Ultra' and 'Note 13 Pro', have been shipped with pre-installed malware disguised as WhatsApp and Telegram applications. This malware specifically targets cryptocurrency users by replacing their crypto wallet addresses in chats. The issue was highlighted by cybersecurity analysts from the Digital Risk Protection department, formerly known as F.A.C.C.T., who also noted the distribution of malicious software through Telegram bots offering modified versions of popular games such as Roblox and Minecraft.