Android Malware Found Preinstalled on Hundreds of Phones, Results in Popup Ads
There is hope to stop these “dropper” apps, however.

Malware has been found preinstalled in hundreds of various Android smartphones. Avast researchers found adware on uncertified devices, with the affected phones displaying popup ads in your default browser and other issues that are difficult to remove.
The infected “dropper” apps are installed in hidden pockets of the system settings and download manifest files that inform the app of other harmful files to download, starting the payload service. The files, Android Package Kits, have ad frameworks from Google, Facebook, and others able to detect antivirus software, which “hold back any suspicious actions in this case,” according to Avast. If this doesn’t work, popup ads for games will appear on your default browser.
The top countries affected are Russia, Italy, Germany, the UK, and France. To combat this, Google Play Protect has been found to automatically disable the dropper server and payload, if it’s available. Otherwise, it’s urged to disable the dropper manually.
In other news, PornHub created its own VPN.