These infected apps would receive commands from the control server to load advertisements, open website in the background and change device settings