To quote from the Kryptowire report: "The firmware also collected and transmitted information about the use of applications installed on the monitored device, bypassed the Android permission model, executed remote commands with escalated (system) privileges, and was able to remotely reprogram t...

I tried to write about this days after the news came up but my comment was blocked! AdUps is included in all OTAs, you are infected by the manufacturer.