Really hate this "something was found" announcements

Which channel distributed the compromised apk? What is the signature of the payload injected? What is the payload, what does it do?