The software can also operate in standby mode.
This lets the victims traffic be collected and analysed.
Secondly, pay attention to misspelled app names, small numbers of downloads, or dubious requests for permissions.
Source:Kaspersky
Read More
source: www.techworm.net