Your New Android Tablet May Have Been Compromised Before You Even Opened the Box

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Keenadu Android Backdoor Infects Firmware via Google Play Apps The Keenadu Android backdoor has been identified as a sophisticated threat that infects device firmware during the build stage and spreads through apps on Google Play. This malware enables attackers to gain remote control of victims' devices, similar to the Triada Trojan, by hooking into the Zygote process, affecting all launched applications. Users of Android devices are particularly at risk from this vulnerability. 25 sources 52