Security researchers at Skycure are upping the ante on a vulnerability that it says now leaves 95.4 percent of all Android devices vulnerable to an attack that hands over control of a phone or tablet to an attacker. The attack leverages the Android feature Accessibility Service along with a feature built into the Android OS that allows you to draw over other apps. Google acknowledged the vulnerability calling it an example of nefarious use of genuine tech Google added it will scan for abuse and take action where appropriate
Source: https://threatpost.com/scope-of-gaping-android-security-hole-grows/118161/