But he immediately saw that the same feature, which allows an application to monitor when other applications launch, could also insert a look-alike login screen, just as a phishing website would.
FORBES: Researchers Show Android Vulnerable To App-Hijacking Attacks