Android devices ship with firmware-level malware (opens in new tab)

Keenadu malware gives an attacker control over a device but appears to be used primarily to facilitate ad fraud