E-commerce app Pinduoduo used Android 0-days to turn 100M+ phones into a botnet [pdf] (github.com)

Reminds me of this incident https://techcrunch.com/2023/03/17/the-justice-department-is-... but on a larger scale.