HTC’s EVO, EVO 3D and 4G phones have a gaping security hole that would allow 3rd-party apps access to all of your info. HTC is working to quickly release a security update that will resolve the issue on affected devices. A third party malware app exploiting this or any other vulnerability would potentially be acting in violation of civil and criminal laws. It’s good to hear that no one has exploited this yet, but be very careful about what you’re downloading and always read ratings and reviews before you do.”]
Source: https://gizmodo.com/htc-comes-clean-on-its-massive-security-hole-5846399