Android Backup Flaw Allows Rogue Apps

Attackers can inject additional applications (APKs) into the backup archive without the user's consent, including those that send premium SMS messages.

from http://ift.tt/1NUHGQ0