[Florin_Andrei]

But wouldn't there be a trail of notifications, or something?

[13]

If malware has root access it can alter everything on the phone without you ever seeing it. Any information falsified, all detection tools subverted.

[fragsworth]

Possibly, if Google is logging everything on their servers. It should be relatively easy for them to find out who got infected.