If you want to sneak malware onto people's Android devices via the official Google Play store, it may cost you about $20,000 to do so, Kaspersky suggests. That update may ask for extra permissions to access the victim's files, and may need to be pulled from an unofficial store with the victim's blessing; it depends on the set up. To avoid becoming an unwitting victim, the researchers remind users not to enable the installation of unknown apps, and always check app permissions to make sure they're not accessing more than they need to perform their functions