Google Cloud Messaging allows small (up to 4 KB) messages to be sent via the Google server from their mobile devices in JSON format. This service is used to determine the coordinates of stolen telephones, remote phone settings, send out messages about the release of new game levels, new products, and more. In the last year alone alone, Kaspersky Mobile Security (KMS) blocked over 160,000 attempted installations. Trojan can send text messages to premium numbers, delete incoming text messages, generate shortcuts to malicious sites, display notifications advertising other malicious programs that are spread under the guise of useful applications or games.”]
Source: https://securelist.com/gcm-in-malicious-attachments/57471/