With one update, this malicious Android app hijacked millions of devices

All it takes is one tweak to change a legitimate app into a frustrating parasite on your handset.