An APK (Android application package file) of the game has been rigged with a remote access tool (RAT) called Droidjack that if installed, could essentially give an attacker complete access to a victim s phone. Researchers with the firm Proofpoint caution that while the malicious APK hasn t been spotted in the wild yet, it has been seen on a malicious file repository service, meaning it could only be a matter of time until its spread online. Pok..mon Go, an augmented reality game based around the 20-year-old media franchise, has already been so popular that its servers have been repeatedly bogged down.
Source: https://threatpost.com/malicious-pokemon-go-app-installs-backdoor-on-android-devices/119174/