https://www.cybernonstop.com/android-app-signing-keys-leaked-and-used-to-signmalware/