ThreatFabric has published an in-depth analysis of two Android malware strains used by the APT41 Chinese cyber-espionage group.

https://www.threatfabric.com/blogs/lightspy-mapt-mobile-payment-system-attack

They're named LightSpy and AndroidControl and are the DragonEgg and WyrmSpy strains first spotted by Lookout earlier this year.

https://www.lookout.com/threat-intelligence/article/wyrmspy-dragonegg-surveillanceware-apt41