Introducing Zscaler's Android Vulnerability Scanner

The report details the Android "master key" vulnerability which allows attackers to insert duplicate classes.dex and AndroidManifest.xml files into APKs so malicious code and additional permissions execute at runtime without breaking the original app signature. The issue affects most current Android implementations and requires vendor-specific patches, and the document notes that malicious apps exploiting the flaw have been seen in the wild and that Zscaler provides a free APK scanner to detect such exploitation.