A report shows four Bluetooth-centered apps by the same developer have been downloaded 1 million times combined while containing malicious code.