Malicious Android apps from the so-called PhantomLance campaign targeted hundreds of users, and at least two slipped past Google’s defenses.
https://www.wired.com/story/phantomlance-google-play-malware-apt32
https://www.wired.com/story/phantomlance-google-play-malware-apt32