Millions of mobile phones come pre-infected with malware, say researchers