The issue is urgent for countires like India, where more than 800 million people will be on smartphones within the next few years.

"Scary Granny ZOMBY" displayed a phishing page that appeared to be from Google. The Play Store pulled the game down in response to Wandera's research.

Phishing rates stayed mostly constant from one quarter to the next, according to a new RSA report.

An Android app might be more likely to ask for access to technical functions. An iOS app might seek to use sensitive features, like the microphone. In any case, Wandera says, know what you're getting into.

The New York AG's office says five company's apps were prone to man-in-the-middle attacks.

Five vulnerabilities in the ManageEngine Applications Manager, and one in the Event Log Analyzer, were disclosed by Digital Defense, Inc.