An Android malware masquerading as a critical system update has been found that can take complete control of a victim's device and steal their data, security firm Zimperium reported. It was found in an app that had to be installed outside of the Google Play Store. The malware can steal contacts, record calls and take photos using the phone's cameras.