The Sun Team APT, likely linked to North Korea, uses Google Play and Facebook as attack vectors.
Source: Threadpost