The Gooligan malware attack targeting Android devices has infected over a million Google accounts and drastically increasing by 13,000 new users a day. According to Check Point, it affects devices running Android 4 and Android 5.

Gooligan spreads via apps from third-party app stores and malicious links in phishing attack messages. It downloads a rootkit to steal authentication tokens to breach data from Google Play, Gmail, Google Photos, Google Docs, G Suite, Google Drive and other programs. It also installs app that can steal your account information to post fake ratings and reviews to raise the profile of these apps.
Has your account been compromised? It’s easy to check to find out.
Check your account at Check Point

Head to the Check Point Website and enter your email address. It will immediately let you know if your account has been breached
You can also scroll to the bottom of this blog post from Check Point to see a list of dozens of apps known to be infected by Gooligan. To see if you have any of these apps installed on your device, go to Settings > Apps for an alphabetical list.

What to do if you have been hacked?

http://www.meetwriters.com/2017/01/how-to-know-if-your-google-account-has-been-hacked.html