The Android malware pushed fake prizes to generate click fraud. The program’s developers borrowed open-source code from the real Telegram app.

Researchers declined to identify the company by name, citing an ongoing law enforcement investigation.

It's only the latest revelation about how scammers are using apps as a way to leverage victims' phones, and generate ad revenue.

"Scary Granny ZOMBY" displayed a phishing page that appeared to be from Google. The Play Store pulled the game down in response to Wandera's research.

The main selling point seems to be convenience: Firefox Lockbox is directly tied to whatever an Android user saves all day within their browser.

The logic seems to be that if a hacked phone was moving, the device probably wasn’t a research tool being used by a security company trying to detect malware, Trend Micro researchers said.