Researchers discovered a vulnerability in Android devices that allows malware to hijack legitimate apps. Using this vulnerability (StrandHogg), cybercriminals could trick users into granting permissions to their malicious apps and provide openings for phishing pages. An exploit of this vulnerability has already been seen in the wild.
https://www.trendmicro.com/vinfo/us/sec ... imate-apps