{"id":214838,"date":"2026-02-18T07:15:00","date_gmt":"2026-02-18T12:15:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/18\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users\/"},"modified":"2026-02-18T07:35:09","modified_gmt":"2026-02-18T12:35:09","slug":"keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/18\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users\/","title":{"rendered":"Keenadu: Android malware that comes preinstalled and can\u2019t be removed by users"},"content":{"rendered":"<p><a href=\"https:\/\/www.csoonline.com\/article\/4133774\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users.html\">Keenadu: Android malware that comes preinstalled and can\u2019t be removed by users<\/a><\/p>\n<p><a href=\"https:\/\/www.csoonline.com\/article\/4133774\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users.html\">https:\/\/www.csoonline.com\/article\/4133774\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users.html<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-02-18 07:15:00<\/a><\/p>\n<p>Source Domain: <a href=\"www.csoonline.com\">www.csoonline.com<\/a><\/p>\n<p>The researchers stated that the threat has already affected users across multiple countries, infecting over 13,000 devices as of February, as detected by Kaspersky. \u201cThe highest numbers of the attacked users have been observed in Russia, Japan, Germany, Brazil, and the Netherlands, but other countries have been affected as well,\u201d Kaspersky researchers added in a blog post.<\/p>\n<h2 class=\"wp-block-heading\" id=\"preinstalled-malware-runs-with-elevated-privileges\">Preinstalled malware runs with elevated privileges<\/h2>\n<p>Kaspersky reported that Keenadu can arrive on new devices, already embedded in system software, allowing it to run with high privileges from the moment the device is activated. Because the malicious components are present in firmware rather than installed later as apps, affected users may have limited ability to detect or remove them through conventional means.<\/p>\n<p>\u201cWithout any actions on the user side, a device can be infected right out of the box,\u201d Kaspersky security researcher Dmitry Kalinin said through a statement in the blog post. \u201cVendors likely didn\u2019t know about the supply chain compromise that resulted in Keenadu infiltrating devices, as the malware was imitating legitimate system components. It is important to check every stage of the production process to ensure that device firmware is not infected.\u201d<\/p>\n<p><a href=\"https:\/\/www.csoonline.com\/article\/4133774\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users.html\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Keenadu: Android malware that comes preinstalled and can\u2019t be removed by users https:\/\/www.csoonline.com\/article\/4133774\/keenadu-android-malware-that-comes-preinstalled-and-cant-be-removed-by-users.html Publish Date:&#8230;<\/p>\n","protected":false},"author":1,"featured_media":214839,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.csoonline.com\/wp-content\/uploads\/2026\/02\/4133774-0-89088500-1771416889-shutterstock_2307700893.jpg?quality=50&strip=all&w=1024","fifu_image_alt":"","footnotes":""},"categories":[46],"tags":[32,57],"class_list":["post-214838","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-malware","tag-security"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214838"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=214838"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214838\/revisions"}],"predecessor-version":[{"id":214840,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214838\/revisions\/214840"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/214839"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=214838"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=214838"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=214838"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}