A simple Android flaw left a billion phones open to phishing attacks

A lack of authentication on updates to network settings left phones from Samsung, Huawei, LG and Sony open to phishing attacks