Gooligan, an Android malware first discovered in August, has infected more than one million Android devices around the world, with more than 13,000 added each day.
What the malware does is to get information about user accounts on Gmail, Google Play Store, Google Photos, Google Docs, Google Drive and G Suite. The goal is to compromise Android devices by installing a rootkit. This grants the attacker to make the infected device to download malicious apps from Play Store.
Those downloaded infected-apps will then generate profits to the attackers, with a reported $320,000 monthly revenue from the fraud.
Gooligan is said to be a branch of Ghost Push which does a similar thing.
Most of the affected devices come from Asia with Android versions older than the Marshmallow.
