Wired, the nature lies in how Android is being distributed: Every smartphone brand can basically tweak the OS, add own code, and preinstall different apps. While this is, of course, great for the different companies it also comes with issues: The phone’s security. “With the hundreds of mobile phone makes and models on the market and thousands of versions of firmware, best-effort manual testing and evaluations simply cannot scale to address the problem of identifying vulnerabilities in mobile phone pre-installed apps and firmware,” said Angelos Stavrou, CEO of Kryptowire, in their press release.
While not all of the phones are sold in Europe and the US you are sure to see at least some brands and models you might recognize, like Asus, LG, ZTE and Oppo.
Take a look at the list of devices and some videos showing some of the exploits on the Kryptowire page.