A sophisticated malware operation involving counterfeit Android smartphones has been uncovered, with devices being sold online at discounted prices preinstalled with cryptocurrency-stealing malware.