Vulnerability allows attackers to modify Android apps without breaking their signatures