“The capability is there and that’s certainly a capability I wouldn’t be comfortable with,” the researcher said.

Despite being caught more than a year ago, data is being taken from millions of cheap Android phones.