"GhostTeam" Malware - Steals facbook Credentials

Vietnamese adware dubbed “GhostTeam” was found hiding in 53 Google Play apps disguised as utility apps, seeks administrative privileges and looks to steal a user's Facebook credentials 

The malware also uses anti-sandboxing defenses and will only retrieve payload, disguised as “Google Play Services,” if it detects it's not in an emulator or virtual environment.

For More:
https://www.scmagazine.com/vietnamese-adware-dubbed-ghostteam-spotted-in-several-google-play-apps/article/737779/