Zscaler identifies 90+ malicious apps on Google Play that were downloaded over 5.5 million times. Many pose as PDF or QR code readers and install data-stealing malware once you update them.