Hacker News Reader

Not if the attacker deletes the message post-pwnage.

But wouldn't there be a trail of notifications, or something?

If malware has root access it can alter everything on the phone without you ever seeing it. Any information falsified, all detection tools subverted.

Possibly, if Google is logging everything on their servers. It should be relatively easy for them to find out who got infected.