IIRC there was a recent Android compromise that played ads under the main window, invisible to the user (except for performance and battery drain) and collecting $$$ for the company that sold the ads.