Android malware targets unofficial releases

“THIRD PARTY Android distributions such as Cyanogenmod has been
targeted by malware that exploits the use of publicly available
private keys.

“The vulnerability in third party Android distributions stems
from the use of private keys that are available publicly in
Google’s Android Open Source Project. Android by default allows the
installation of applications without user intervention that have
the same private key as the operating system itself.”

Complete Story