Android devices ship with firmware-level malware

Keenadu malware gives an attacker control over a device but appears to be used primarily to facilitate ad fraud

SOPHOS