An Android vulnerability known since 2012 has been found to be more serious than previously thought. The vulnerability in Android versions below 4.2, which is early Jelly Bean, could be exploited by clicking on a link in a text message. Once loaded on the phone, malware could essentially control the device remotely. Attackers could read the contents of the SD memory card, steal the address book and access the phone’s camera and microphone. Businesses should be on the look out for employees accessing corporate networks with older Android phones.”]
Source: https://www.csoonline.com/article/2134393/beware-of-employees–cheap-android-phones.html