How a Massive Ad Fraud Scheme Exploited Android Phones to Steal Millions