It's quite possible that the victims were convinced to try the app by the attacker outside of the Play Store and the app existing on the store was just an attempt to give it additional credibility when they were directed to download it.