Even worse, it appears that BadNews is polymorphic, that is, it changes its own code structure depending on its deployment parameters making it considerably harder to detect and remove.

FORBES: 2013: The Year Android Users Get Pwned