Recent reports indicate that hackers are distributing counterfeit Android phones preloaded with crypto-stealing malware, specifically a revamped version of the Triada malware. Kaspersky has highlighted this issue, noting that these counterfeit devices may come with malicious applications that lock users out, requiring a password to uninstall. The password is set by the hacker who installed the malware. TechCrunch has provided guidance on how to remove this spyware without needing the password. The situation underscores growing concerns about cybersecurity and the risks associated with purchasing counterfeit electronics.