Android users are being targeted by more than 20,000 “trojanized” pieces of adware masquerading as legitimate applications, according to new research.

In research released on Wednesday, mobile security company Lookout says that malware called “Shuanet” is infecting Android devices by posing as popular applications like Facebook, Okta, Twitter, and WhatsApp.