The BitKeep team confirmed that some APK package downloads have been hijacked by attackers and installed by users.