Researchers from Avast the antivirus firm are investigating the discovery of pre-installed malware found in 141 low-cost Android devices in over 90 countries. The malware is composed of two separate APKs, the dropper, and the payload. In the older versions of the malware, the experts noticed a separate adware app. The adware has been active for at least three years, and is difficult to remove as it is installed on the firmware level and uses strong obfuscation. Avast published a list of over 140 Android smartphones and tablets on which it says it found the groups malware which they named Cosiloon.”]
Source: https://securityaffairs.co/wordpress/72916/malware/cosiloon-pre-installed-malware.html