Kaspersky finds a downloader pushed through built-in firmware updaters of Android dashboards, tied to the MoYu Group.