Malwarebytes’ mobile security research team says many Android users may still have a backdoor on their device. Backdoor code created by a Chinese company called Adups was collecting user data and sending it to servers in China. The backdoor was hidden inside a built-in and unremovable app named com.adups.fota, the component responsible for the phone’s firmware-over-the-air update (FOTA) system. The new component is found on phones under two names, such as comadupsfota.sysoper or FOTA.apk.
Source: https://www.bleepingcomputer.com/news/security/chinese-backdoor-still-active-on-many-android-devices/