So my friend linked me this article about a specific Pokémon GO app that is infected with a rat. The app works perfectly fine but it also steals information about you, listens to your phone calls etc etc.
(Read article if you want to learn more about it)
Now If you downloaded the pokemon go apk to your phone from any other sources than Google play store and APKMirror I advise you to uninstall and get it from either Google play store or APKMirror.
But you can also do a quick check if you have this malicious one mentioned in the article.
1. Go to Settings -> Apps
2. Click on Pokémon GO and then Permissions
3. A legit install should only have 4 permissions (Camera, Contacts, Storage and Location) If you have more then its 100% malicious.
Stay safe!
Source:
https://nakedsecurity.sophos.com/201...to-your-calls/
Sorry for potential grammar/spelling mistakes, I've been up all night