xHelper Android malware re-installs itself on infected devices even after users delete it or factory reset their devices. xHelper reportedly infected over 45,000 devices last year. Malware analyst at Kaspersky, Igor Golovin, finally solved the mystery by unveiling technical details on the persistence mechanism used by this malware. As the initial attack vector and distribution, the malware app disguises itself as a popular cleaner and speed optimization app for smartphones affecting mostly users in Russia (80.56%), India (3.43%), and Algeria (2.43%)
Source: https://thehackernews.com/2020/04/how-to-remove-xhelper-malware.html