Really hate this "something was found" announcements Which channel distributed the compromised apk? What is the signature of the payload injected? What is the

Really hate this "something was found" announcements Which channel distributed the compromised apk? What is the signature of the payload injected? What is the payload, what does it do?