fake id

[heyitsejp]

I received an email today that appears to be from Norton.  It said:

Do you use an Android™ device? Be aware that "Fake ID", a recently announced vulnerability, could allow malicious apps to access legitimate applications and steal your passwords or financial information by falsifying built-in security certificates. 

Fake ID sneaks onto your Android smartphone or tablet through Trojan apps. It could affect millions—from everyone using Android version 2.1 up to 4.4. 

Take immediate action to ensure your information remains secure.

Norton Mobile Securityll remain unaffected and your ID is safe. For everyone else, download a free trial right now on the Google Play store.    

My question:  Is this a true issue or another scam/spam?                                                            

[SMW_Washington_IL · Accepted solution]

The BBC reported that Blue Box discovered the issue and reported it to google, google has made a patch to fix the problem but so far verizon has not sent it out. http://r.search.yahoo.com/_ylt=A0LEV0Il_txTm1sAqOdXNyoA;_ylu=X3oDMTEzYnYza281BHNlYwNzcgRwb3MDMQRjb2x...

Problem is mainly with apps purchased outside google play but it is possible to get one from the play store. Blue box has a free download to see if you have any bad apps and to see if your phone has received the patch, it will not prevent you from installing a bad app or protect you if you do. The patch is the best solution but until then Norton may not be a bad idea.