Even Google play has been known to have rogue apps on and recently if you happen to get your Pc infected with a certain virus then your phone will get infected and a rogue Google play app will be installed - Malwarebytes has also picked up on two known viruses
But if you aren't Rooted or have your Bootloader unlocked, Have custom roms from unknown makers installed and USB debugging is disabled then you should be fine the latter about USB debugging is for the rogue Google play app as that's how it gets installed on your phone
