The original reports explain that the trojans come from small 3rd party stores and illegal downloads.