Antivirus researchers at Dr.Web have discovered 42 models of low-cost Android smartphones are shipped with the Android Triada.231 banking malware. The Triada Trojan was designed with the specific intent to implement financial frauds, typically hijacking the financial SMS transactions. The only way to remove the threat is to wipe the smartphone and reinstall the OS. The infected app found on the device was developed by a Chinese firm, the experts highlighted that the code was signed with the same certificate that was observed in 2016 infections.”]
Source: http://securityaffairs.co/wordpress/69794/malware/smartphone-pre-installed-triada.html