Malware researchers discovered a new malicious campaign for Android devices that replaces legitimate apps with tainted copies built to push advertisements or hijack valid ad events.

Around 25 million devices have already been infected with what researchers have dubbed “Agent Smith,” after users installed an app from an unofficial Android store.