A repackaged version of Google’s Android Market Security Tool is in circulation in a Chinese app marketplace. The malicious app’s code appears to be based on a project hosted on Google Code and licensed via the Apache license. Google this week remotely pushed the real Android Market security tool to all of the Android devices that were infected by 50-plus free apps found on the Android Market to be carrying malware that “roots” the phone, steals data, and installs a back door. An initial estimate of anywhere between 20,000 to 500,000 infected users had downloaded the app.”]