Researcher discovered a new information-stealing trojan, pretend to be a system update software to grant permission of an Android device, then collect from browser searches to record audio and phone calls. Organizations should manage their hand-held devices, not to install the application from the third-party app store. 

For details, please refer to the below link: