The six malicious apps found by researchers aimed to attract Android users searching for antivirus, cleaner and security apps. It’s possible that victims were sent phishing links which directed them to the download pages for the Sharkbot infested apps. The apps were able to bypass Google Play store protections because malicious behaviour in the apps wasn’t activated until after they’d been downloaded by a user and the app has communicated back to servers run by the attackers. .
Link: Thousands of Android users downloaded this password-stealing malware disguised as anti-virus from Google Play
via http://www.zdnet.com