There’s too little a user can do when hit with a complex Android malware that comes preinstalled on their new smartphone or tablet. Security researchers at Kaspersky have flagged a multifaceted Android malware dubbed Keenadu that can ship preinstalled via device firmware, compromising users before they even complete setup. “Keenadu serves as a reminder that mobile malware isn’t just a bad app problem anymore, but rather a supply chain and firmware integrity problem,” said Nick Tausek, lead security automation architect at Swimlane. “The most dangerous Keenadu variant is embedded at the firmware level, giving attackers effectively unlimited control and the ability to operate inside the contex...