Since August, at a rate of 13,000 devices per day.
Reportedly targets devices running Android 4 (Jelly Bean, KitKat) and 5 (Lollipop) [combine for 74% of in-use Androids]. Fraudulent installation of apps from Google Play and ratings generated unknowingly by affected users alleged.
Google (GOOG, GOOGL), in response to Check Point inquiry: "We appreciate Check Point's partnership as we’ve worked together to understand and take action on these issues. As part of our ongoing efforts to protect users from the Ghost Push family of malware, we’ve taken numerous steps to protect our users and improve the security of the Android ecosystem overall."