The so-called GriftHorse campaign used clever techniques to avoid detection in Google Play for nearly a year.