The latest Android security vulnerability, dubbed Janus, uncovered malicious actors that can bypass app signatures and inject malicious code into Android apps. Plus, malware-infested mobile apps again are on the rise.

GuardSquare security researchers discovered the vulnerability (CVE-2017-13156), which put millions of Android devices in danger, last summer and reported it to Google, which patched the hole among four dozen vulnerabilities as part of its December Android Security Bulletin.

“This vulnerability is significantly different as it would allow an attacker to augment or inject code into an application on a non-rooted device without disrupting the application's signature. For example, this could mean changing the behavior of a banking app to exfiltrate credentials,” mobile app security expert, Rusty Carter, VP of product management at San Francisco-based application protection solution firm Arxan, said.