One link in the article shows the problem also exists in phones sold in Brazil and Myanmar: https://www.upstreamsystems.com/pre-installed-malware-androi... . I'd look at the source.