Dark Caracal has trojanized Orbot, Signal, WhatsApp and other Android apps [pdf](info.lookout.com)

https://info.lookout.com/rs/051-ESQ-475/images/Lookout_Dark-Caracal_srr_20180118_us_v.1.0.pdf