Google Play caught hosting an app that steals users’ cryptocurrency - Ars Technica

"Clipper" app replaced user's wallet address with addresses controlled by developers. ....
https://arstechnica.com/information-technology/2019/02/google-play-caught-hosting-an-app-that-steals-users-cryptocurrency/