In reply to Rox Burkey.

You may find the first two posts in this series interesting, Rox:

Post 1) This research began with the discovery of a specific rouge MDM attack - https://blog.talosintelligence.com/2018/07/Mobile-Malware-Campaign-uses-Malicious-MDM.html.

Post 2) The actors were observed targeting Android and Windows devices as well and used some clever methods- https://blog.talosintelligence.com/2018/07/Mobile-Malware-Campaign-uses-Malicious-MDM-Part2.html