The 'Cloak & Dagger' Attack That Bedeviled Android For Months

Not all Android attacks come from firmware mistakes.

from SweetTech https://www.wired.com/story/cloak-and-dagger-android-malware