GCVE-110-CERTFI-2025-0056

Android smart devices pre-infected with malware have been detected in the Finnish consumer market. To enable the installation of malware, a backdoor is already embedded in the devices at the manufacturing stage and cannot be removed. If the manufacturer of the device does not offer an official fix, the device must be disconnected from the network and delivered to a collection point for electrical and electronic waste (WEEE). The National Cyber Security Centre Finland (NCSC-FI) at Traficom urges citizens to check the equipment they have at their disposal and, if doubts arise, to carefully consider purchasing new ones.