[userbinator]

Upon clicking the ads, the malware author receives payment from the website developer, which pays for the illegitimate clicks and traffic.

Are they really certain of this, or could it just be the work of someone who wants to "poison the well" of Google's ad network data collection?

It somehow reminds me of https://news.ycombinator.com/item?id=10611594 (Would CheckPoint also consider that malware?)

[weeks]

If the user isn't informed the app they installed is clicking on ads, it absolutely is malware.