A popular Android app called Nine leaks Microsoft Exchange user credentials when users are tricked into connecting to rogue wireless access points.
Source: Threadpost