22 apps with 2 million+ Google Play downloads had a malicious backdoor (Ars Technica)