Quokka’s researchers dug into a modified version of the Android launcher app and found it had the ability to silently install, remove, and replace other apps on your phone all over a connection that barely checks who it's talking to. In addition, it checks every four hours to see if there is code available to download and execute with system level privileges.