More than 500,000 Huawei users have downloaded from the company’s official Android store applications infected with Joker malware that subscribes to premium mobile services. The list of malicious apps included virtual keyboards, a camera app, a launcher, an online messenger, a sticker collection, coloring programs, and a game. The malware could subscribe a user to a maximum of five services, although the threat actor could modify this limitation at any time. The same modules downloaded by the infected apps in AppGallery were also present in other apps on Google Play, used by other versions of Joker malware.
Source: https://www.bleepingcomputer.com/news/security/joker-malware-infects-over-500-000-huawei-android-devices/