ViperRAT 2.0 and Desert Scorpion represent a rare instance of a malicious APT in an official app marketplace.

https://www.infosecurity-magazine.com/news/a-pair-of-mobile-apps-in-google/