Security researchers from Webroot have come across few font installing apps hosted on Google Play that install Android spyware called "iKno".
The apps look like a legitimate font app and allow users to install new font on their android device.
The researcher analyzed the app and identified malicious code that downloads and executes ikno.apk file from a website.
iKno is android spyware developed by Technoreap solutions that monitors call logs, text messages, location.
It appears the malicious apps and developer's account have been removed from the Google play.