Chinese advertising software development kit (SDK) called Igexin has an ability to Spying on Victims via downloading malicious plugins that have more than 500 apps used this SDK in Google Play Store. Apps containing the affected SDK were downloaded over 100 million times across the Android ecosystem. The malicious versions implement a plugin framework that allows the client to load arbitrary code, as directed by responses to requests made to a REST API endpoint hosted at http://sdk.open.phone.com/api.php.”]
Source: https://gbhackers.com/chinese-advertising-spying-android-sdk/