Cyber-security firm Avast says a criminal operation that has been inserting malware in the firmware of low-cost Android devices is still up and running. Avast published a list of over 140 Android smartphones and tablets on which it says it found the group’s malware which they named Cosiloon. The malware doesn’t seem to have received any updates and still operates in the same manner. The apps the malware installs are used solely to display ads on top of other apps or the Android interface itself.
Source: https://www.bleepingcomputer.com/news/security/malware-found-in-the-firmware-of-141-low-cost-android-devices/