Nasty malware duo pre-installed on thousands of cheap Android phones