It looks like counterfeit Android devices in Russia were discovered to have the Triada malware preinstalled on them.