Compromised OEM Android platform certificates used to sign malware
Multiple platform certificates used by Android OEM device vendors to digitally sign core system applications were utilized by threat actors to sign apps containing malware.
Source: bleepingcomputer.com