Android.Triada.231 Trojan preinstalled on several mobile devices. Trojans embedded in system libraries that used in launching applications on mobile devices. Trojan once executed use to create a working directory launch its parameters and check for the environment it is running. If it is Dalvik environment(discontinued by Google) trojan use to launch attacks immediately after they start. It is capable of penetrating various application modules, attackers can make use of trojan to download malicious plugins for stealing confidential information from bank applications, messengers etc.”]
Source: https://gbhackers.com/trojan-found-cheap-android-smartphones/