How the Play Store put malware on 500,000 Android smartphones