Why I'm happy my iPhone is locked
Vodafone distributes mariposa (via DF)
Apparently a refurbished phone was sent back out with a number of malwares resident.
Personally, I don’t think the question is “Why is Vodafone’s QA not up to finding this?” but instead should be “Why the hell is it even possible for this kind of stuff to be installable on a smartphone?”.