Hackers have inserted malware inside an app offered for download by the Vietnam Government Certification Authority (VGCA).