German manufacturer Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. The malware took the form of multiple unwanted apps that were downloaded and installed through a pre-installed system update app. Older models affected include GS100, GS160, GS170, GS180, GS270 (plus), and GS370 (plus) series. The infections are said to have occurred starting March 27 and April 7.
Source: https://thehackernews.com/2021/04/gigaset-android-update-server-hacked-to.html