title: Unknown pirate? version of my app in Firebase Analytics
body: <p>Welcome all</p>
  <p>In Google Analytics, I can see installs from a 1.3.0 version of my app, coming from all the world, including my own country, but the most part of the installs for that pirate version comes from Indonesia, Egypt, etc... and other countries from Africa or Asia. My app is still on <code>1.1.X</code> so that <code>1.3.0</code> must be a cloned APK.</p>
  <p>My app has approximately 100k installs and 4k active users, and <strong>that 1.3.0 pirate version has more than 1 million installs and 80k active users</strong>. But the cloned pirate app has very low engagement time.</p>
  <p>If I add a filter called <code>session source</code> with value <code>google-play</code> both versions appears, so supposedly both versions are from <code>google play</code>.</p>
  <p>If I add a filter called <code>stream id</code> the same package name appears from both versions, the real package name of my app.</p>
  <p>I can't understand. Supposedly the same app with the same package is being installed from Google Play buth with a non real pirate <code>1.3.0</code> version?</p>
  <p><strong>What can I do for discover what is happening and see where is uploaded this cloned pirate version of my app?</strong></p>
  <p>I used Proguard, yes, with some part of the app unobfuscated to avoid crashes with <code>GSON</code>.</p>