UPDATE: Google patches Android icon permissions attack