Compromised OEM Android platform certificates used to sign malware
Multiple platform certificates used by Android OEM device vendors to digitally sign core system applications were utilized by threat actors to sign apps containing malware.
Samsung Electronics Google Play Android Partner Vulnerability Initiative Lg Electronics Reverse Engineer Android Security
Source: bleepingcomputer.com