Servers controlled by Hangzhou Shunwang Technology collect phone contact lists, geolocation, and QQ messenger login info through a data-stealing component present in up to a dozen Android apps available from major third-party stores in China. The code that steals the information hides in a data analytics Software Development Kit (SDK) integrated into seemingly benign apps. The compromised apps have been downloaded at least 111 million times. The operation targets only devices running Android 6 (Marshmallow) and up, which makes for more than 70% of the Android market share.
Source: https://www.bleepingcomputer.com/news/security/chinese-it-services-giant-harvests-contacts-tracks-users/