Samsung has acknowledged that the microSD cards in a batch of its S8500 Wave mobile phones sold in Germany were infected with an autorun Trojan. The Samsung incident comes just three months after a similar attack in which the memory cards on a group of HTC Magic handsets distributed in Spain by Vodafone were found to be pre-loaded with the client for the Mariposa botnet. Security experts say these attacks often are executed by attackers paying an employee working in the factory that manufacturers the device or memory card.
Source: https://threatpost.com/samsung-handsets-distributed-malware-infected-memory-cards-060410/74064/