I got snookered for $14 worth of ETH last autumn by this fake. It could have been a much more expensive lesson, luckily it wasn't.
The article says the malware was released on Feb. 1 2019, but I know for a fact this malware has been around longer than that. The scammer must keep trying the same trick every few months.
It's likely going to attract a few victims, since has been recent news about MetaMask publishing a legitimate Android app.
Jeez, makes you wonder how much these fakes have scammed, and how many more of them are there.
It's definitely a reason to not blindly trust Google Play or App Store in terms of the security of the apps you are downloading. Not only can they possibly be complete scams that you're downloading (since these app hosting platforms have no control over the actual service that the apps are providing), they could even contain malware in this instance.
Whenever you are copying a bitcoin address, whether on your phone or on your laptop, make sure that you at least glance over it to verify that it's the one that you copied. There has been a ton of these malicious applications that modify the bitcoin address which you copy into your system when you're sending funds, and it's reasonable to take these precautions.