https://bac-pac.org/index.php/2017/12/12/android-flaw-lets-hackers-inject-malware-into-apps-without-altering-signatures/