Zimperium found 64 variants of Joker trojans unreported by the anti-malware industry. Trojans main functionality is to load a dex file and perform malicious activities like inspecting the notifications or sending SMS messages to premium subscriptions. Trojans use code injection techniques to hide among commonly used package names like org.junit.internal, com.google.gms.internal or comunity3d.Unity.Unity provider, to name a few.”]