Is that true? Could you provide a link to an app in the iOS store other than Pokémon Go that is named "Pokémon Go"? Note that I'm not talking about apps with names like "Guide for Pokémon Go"; this attack involved being able to name the app "Google Docs"–seemingly identical to the name of the original app by Google. I'd assume they'd block even sort-of similar names, e.g. "GoogIe Docs" with a capital "i" instead of a lower-case "L".

Anyone have any ideas how the attacker was able to register the name "Google Docs" with Google? I assume you're not supposed to be able to do this or we would have seen this attack much earlier. My original guess was that the name was in non-Latin (Unicode) letters with the same appearance as Latin letters, but my primitive method of copying and pasting into Python and checking for equality with the plain Latin string indicated this wasn't the case.