https://cointelegraph.com/news/fake-metamask-crypto-malware-pulled-from-google-play-after-tip-off
An app masquerading as DApp MetaMask contained malware that aimed to steal coins by replacing wallet addresses.