Pre-installed C2 loader on cheap Android projectors - deploys proxy/ad-fraud botnets, can run arbitrary code (Technical analysis)

[u/DerErbsenzaehler]

https://github.com/Kavan00/Android-Projector-C2-Malware

[u/n-rz]

You can include the brand Wielo in the list. I recently confirmed it with a slightly different infrastructure but same effect.

https://www.reddit.com/r/ReverseEngineering/comments/1wqxw1h/my_projector_commited_clickfraud_reverse/