Kaspersky researchers reported that the app in question was CamScanner, “a phone-based PDF creator that includes OCR (optical character recognition.”
The report notes that CamScanner was a legitimate app with no malicious intentions. Like other applications, the developers displayed ads and offered in-app purchases to make money. “However, at some point, that changed, and recent versions of the app shipped with an advertising library containing a malicious module,” writes the researchers.