https://wwtyrd.com/tech/garret/several-android-oems-signing-keys-leaked-used-for-sign-malware/