No one and no thing is safe — not even those innocuous games you like playing on your Android phone. Well, at least some of them. has the details:

An Android app component meant to provide inter-user chatting capabilities has been opening websites and clicking on ads in phones’ background.

According to a report published last week, this malicious component is part of a software development kit (SDK) offered by a Chinese company named 呀呀云 (Ya Ya Yun).