Nineteen million downloads. That’s how far this latest batch of bad Android apps managed to spread before anyone caught on. Google has now cleared them from the Play Store, but the episode shows once again how messy the malware problem has become, and how even ordinary-looking tools can open the door to something much worse.