An Android flaw has been uncovered that lets malware insert malicious code into other apps, gaining access to the user's credit card data and take control of the device's settings.

BlueBox Company
have already alerted the Google about the problem with emphasis of resolving
the issues as soon as possible. Goggle has already confirm that it had created
a fix.
Google quoted, "We
appreciate BlueBox responsibly reporting this vulnerability to us. Third-party
research is one of the ways Android is made stronger for users," said a
spokeswoman.
"After
receiving word of this vulnerability, we quickly issued a patch that was
distributed to Android partners, as well as to the Android Open Source
Project."
However,
the many thousands of devices still running versions of the operating system
ranging from Android 2.1 to Android 4.3 have not been sent the fix by relevant
network operators and manufacturers remain vulnerable if they download apps
from outside the Google Play store.
Reference: http://www.bbc.com/news/technology-28544443

