Researchers at Georgia Institute of Technology have discovered a new attack against Android OS, dubbed Cloak and Dagger The attack leverages a pair of legitimate app permissions that is being widely used in popular applications to access certain features on an Android device. The attacks only require two permissions that, in case the app is installed from the Play Store, the user does not need to explicitly grant and for which she is not even notified. These attacks affect all recent versions of Android (including the latest version, Android 7.1.2), and they are yet to be fixed.”]
Source: https://securityaffairs.co/wordpress/59468/hacking/cloak-and-dagger-attack.html