  In the first quarter of 2011, Android has become the top-selling operating
system for smartphones. In this paper, we present a novel, highly critical
attack that allows unprompted installation of arbitrary applications from the
Android Market. Our attack is based on a single malicious application, which,
in contrast to previously known attacks, does not require the user to grant it
any permissions.
