Google Play app with 500,000 downloads sent user contacts to a Russian server
A security firm discovered malware in an Android app with over 500,000 downloads on Google Play that secretly transmits users' contacts to an attacker-controlled server and signs them up for expensive subscriptions.
Source: techstory.in