Google has pulled three malicious apps from Google Play, one of which exploits a recently patched kernel privilege escalation bug in Android (CVE-2019-2215) to install the app aimed at spying on users. About CVE-2019-2215 The existence of CVE-2019-2215 was discovered in late 2019 when it was spotted being exploited in the wild.

Read full article on Help Net Security