Now what? Will there be more action than a blog post? This is a major criminal operation. If this has been found on multiple phones, tracing back the supply chain should reveal the common insertion point. That's a routine law enforcement job. The FBI has a "Cyber Division", and once in a while they catch somebody.
