Cyber security experts have been befuddled with this sophisticated mobile malware infusion attempt. The malicious messaging app has been developed based on the source code of the Telegram messenger app which is a legitimate app. Google has removed these malicious apps, and are no longer available in its store. The attackers seem to have built over 4000 apps and bombarded them at the Google Play Store. Some indications showed that the malware apps could possibly have originated in Iraq. The ability to develop apps to thwart Google’s screening process raises suspicion of the possible involvement of a nation-state.”]
Source: https://hackercombat.com/spying-messaging-apps-sneak-google-app-play-store/