An Android vulnerability called Janus allows attackers to inject malicious code into signed Android apps.
Source: Threadpost