Security researchers have discovered a new Android trojan named Skyfin that can infiltrate the local Play Store app and download or purchase other apps behind the user’s back. Until now, Skyfin has been found only as a second-stage download on phones infected by trojans of the Android.Down loader family. Skyfin is notable because of its ability to download and run exploits that root the user s device. The trojan’s operators appear to be making a profit by boosting the install counts of other apps.
Source: https://www.bleepingcomputer.com/news/security/android-trojan-hijacks-google-play-store-covertly-downloads-or-purchases-apps/