Sprint Sold Phone With Chinese Malware, Cybersecurity Firm Claims