If it doesn’t come directly from the Google Play Store, do not download or install whatever application it is. This simple rule could protect you from malware such as that from the Transparent Tribe, a suspected Pakistani threat actor who is hiding remote access tool (RAT) features inside another application that appears to be legitimate.
The
Source: Hot Hardware – CapraRAT Malware Targets Android Users By Spoofing YouTube, What You Need To Know