Attackers Exploit Android Application Package Flaw to Hide Malware

In addition to deploying rogue application updates, the Janus vulnerability can also be used to hide a malicious payload from security programs. For example, a malicious APK can have a clean DEX file in its header with its only purpose being to load malicious resources from the rest of the APK.

from Google Alert - vulnerability http://ift.tt/2zCVxsZ
via IFTTT