David Bisson a contributor to grahamcluley.com reports that Trojan malware is being found preinstalled on several Android phone models.  This lovely malware called Triada is undetected by anti-virus applications and is designed to steal banking and login credentials as well as other information. Now you don’t even have to click on a link or download an app.  You can have your phone infected from the point of purchase. Yaaayyyy!!!!  The infected phone models are:

• Leagoo M5 Plus
• Leagoo M8
• Nomu S10
• Nomu S20

These phones are produced by Chinese OEMs and can be purchased on Amazon.  It is unclear as to whether the malware was installed intentionally or by a disgruntled insider. Regardless, if you are looking for a cheap Android phone I would avoid unrecognizable brands shipped direct from China. It could end up costing you a lot more in the long run.