the page transmits the captured PIN or pattern details, along with a unique device identifier (the Android ID) to a PHP script." Due to improperly secured C2 infrastructure, Zimperium was also ...