A spyware device was discovered to be pre-installed in a low-priced smartphone that was made in China when a German cyber-security firm purchased the phone from an online retailer last month.