«Researchers recently found at least 50 apps in the official Google Play market that made charges for fee-based services without the knowledge or permission of users. The apps were downloaded as many as 4.2 million times»

Source : Malicious apps with >1 million downloads slip past Google defenses twice | Ars Technica