As always the end user only receives apps that he or she would have received for free on the real Play Market or the Amazon App Market. Of course even Google can't keep all malware of it's market. With the recent release of the BadNews Trojan on Google Play, even after all of the safeguards where put into place, it shows that it is good practice to keep an updated Anti-Virus app installed.
The Fake Google Market can be found at: hxxp://play-android-markt.com/. (Live Link to Malware)
A bad app download Example (Live Malware): hxxp://app.play-android-markt.com/files/get?filename=it.android.demi.elettronica&scheme=app&projectId=5585&namespace=wapcash&applicationName=ElectroDroid&url=http://androsportal.com&image=http://play-android-markt.com/play-android-markt.com/0/ru/images/icon_9010550421218012627_2.png&icon=http://play-android-markt.com/play-android-markt.com/0/ru/images/icon_9010550421218012627_1.png&size=509&theme=
The VirusTotal of the example can be found: here.
Stay safe out there