The cybersecurity specialists group Zimperium has published a blog post warning Android users off installing an app called “System Update” which masquerades itself as a system-update tool and is in fact an Android malware.

Once installed on devices, it steals information ranging from SMS messages, clipboard data, credit card data, personal and sensitive information from their phones or tablets. It may also hijack phone cameras and mics to spy on unsuspecting users.

This is because it is apparently a form of malware called a Remote Access (or RAT) trojan and may thus be capable of sending all kinds of user data back to its C&C server. Therefore, they may allow a malicious actor to find out an awful lot about a given device's owner.