Google and a cybersecurity company are disputing over claims that an application on Android phones left the devices vulnerable to cyberattacks and spyware.

On Thursday, cybersecurity company iVerify published a report about an Android package called “Showcase.apk” that was installed on a large number of Pixel devices shipped around the world since September 2017.

The Showcase.apk code runs at the system level and is designed to turn a phone into a demo device, fundamentally changing the way the operating system works, according to iVerify.

The company said the application “leaves millions of Android Pixel devices susceptible to man-in-the-middle (MITM) attacks, giving cybercriminals the ability to inject malicious code and dangerous spyware.”

https://therecord.media/google-to-remove-app-pixel-vulnerable