The malware was found in six different wallpaper apps, each of which had been downloaded between 100 and 500 times.
During the same period, the total number of mobile malware samples surged from 189,626 to 299,950, according to Kaspersky Lab.
The app was briefly the top new paid app on Google Play, but it did nothing at all.
A Tripwire survey also found that 30 percent of IT professionals haven't changed their wireless routers' default passwords.
The company says 12.7 percent of all apps on Google Play in 2013 were malicious, up from just 2.7 percent in 2011.
The malware is designed to steal text messages and block incoming phone calls from specific numbers.
The device, called Blackphone, will run a custom build of Android named PrivatOS.
More than one in four government employees say they haven't received mobile security training.
A SailPoint survey also found that 45 percent believe employees would sell company data for the right price.
Still, that's better than last year, according to Arxan Technologies.