Trojan, named Android.Slicer.1.origin, is usually installed by other malware programs on a device and executes functions specific to popular service utilities and SEO software. It can also install other applications, including paid ones, with the help of another virus known as Android.Rootkit.40. The Trojan is only found in Android versions 4.3 and 4.4 and later. To protect against this malware, users should download applications only from trusted developers found on the Google Play Store.”]
Source: https://grahamcluley.com/android-trojan-loads-ads-installs-paid-apps-victims-devices/