Researchers from Akamai, OracleFlare, Google, Flashpoint and Flashpoint found a botnet called WireX created a DDoS attack using Android devices that running malicious applications which is designed to create DDoS traffic. The attack targeted Content Delivery Network such as WordPress and many CDNs were infected by this botnet dubbed WireX. Google blocked 300 apps associated with the issue from the Play Store, and were in the process of removing them from all affected devices.”]
Source: https://gbhackers.com/combined-malicious-android-ddos/