Google confirms that advanced backdoor came preinstalled on Android devices - Ars Technica

After Google successfully beat back Triada in 2017, its developers found a new way in.
https://arstechnica.com/information-technology/2019/06/google-confirms-2017-supply-chain-attack-that-sneaked-backdoor-on-android-devices/