A vulnerability in Google’s Android operating system could enable an attacker to covertly replace a benign Android application with malware during the installation process. The vulnerability affects applications installed from third party application stores.
According to researchers, this malware could allow the attacker to gain full access to a compromised Android device, including usernames, passwords and sensitive data. It is estimated that this vulnerability could potentially affect nearly half of all current Android devices. Devices running Android 4.4, KitKat, or later are not affected.
We recommend you update to Android 4.4, KitKat, and exercise care when downloading third-party applications.