Trojan Dvmap is the first Android malware that injects malicious code into the system libraries in runtime. It has been downloaded from the Google Play Store more than 50,000 times. Kaspersky Lab reported the Trojan to Google, and it has now been removed from the store. Trojan supports even the 64-bit version of Android, which is very rare. Trojan uses 4 different exploit pack files, 3 for 32-bit systems and 1 for 64-Bit-systems, to bypass Google Play security checks, and the malware creators used a very interesting method.”]
Source: https://securelist.com/dvmap-the-first-android-malware-with-code-injection/78648/