enelsonmoore

I'm working on analyzing a similar compromise of Google-certified phones and tablets, some actively sold, with Triada and other malware, but have not yet been successful at reporting it to Google. If you know anyone who can get this to Google's threat intelligence team, send them the link to my report: https://ethannelson-moore.github.io/blog/2026/10/25/maxwest-...

I'm working on analyzing a similar compromise of Google-certified phones and tablets, some actively sold, with Triada and other malware, but have not yet been successful at reporting it to Google. If you know anyone who can get this to Google's threat intelligence team, send them the link to my report: https://ethannelson-moore.github.io/blog/2026/10/25/maxwest-...

My secondary phone, the Maxwest Nitro A65, was infected with Triada malware by a security update a couple months ago. I reported this to Google through multiple avenues and received either no response or nonsensical responses. It is still on Google's list of certified Android devices, and Google Play Protect still reports it as certified. The phone is currently being sold at a deep discount as part of the US government-subsidized Lifeline program which provides phones to people who could not otherwise afford them. I have created a tool that scans Android firmware for malware and have found many more infected devices and novel variants of malware. I plan to publish this tool and more of my findings soon.