Malicious Signal and Telegram Android apps, aiming to deliver the China-linked 'BadBazaar' spyware, were found on the Google Play Store and Samsung Galaxy Store, linked to China-aligned APT group GREF, according to ESET.