950 million Android phones can be hijacked by malicious text messages

A security research company has found what it's calling "the mother of all Android Vulnerabilities- a flaw in the popular mobile operating system that could give hackers access to millions of users' personal data

In a blog post on its website, Zimperium said 95 percent of Android devices worldwide are vulnerable. "The targets for this kind of attack can be anyone from Prime ministers, govt. officials, company executives, security officers to IT managers," it warned.
But the company told National Public Radio that so far, the flaw has not been exploited by hackers. "That's the good news,"

Attackers only need your mobile number, using which they can remotely execute code via a specially crafted media file delivered via MMS. A fully weaponized successful attack could even delete the message before you see it. You will only see the notification. These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited. Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised and you will continue your day as usual – with a trojaned phone.

For more information check : http://blog.zimperium.com/experts-found-a-unicorn-in-the-heart-of-android/