From Wikipedia
Researchers warn the campaign is ongoing, urging users to verify developer credentials before installing.