How can a malicious APK contribute to a DDoS botnet?

Malicious APKs can contain code that silently connects to a command-and-control (C&C) server and receives instructions. These instructions might include participating in a DDoS attack by sending requests to a specific target. The user is typically unaware their device is being used in this way, as the malicious activity is often hidden.