[url=http://gizmodo.com/a-4-year-old-android-bug-could-bring-malware-to-99-of-668123042]Source (Gizmodo)[/url]
[quote]A team of security researchers claim to have identified a four-year-old Android bug that can allow malicious trojans to appear as verified apps, infecting devices with malware while users remain unaware of its presence.[/quote]
-
It seems that the malicious update has to come from a 3rd party provider because Google's main store would be a little more difficult to trick into providing the fake update. Though this bug reminds me of a flaw that was found in Windows the other year that could fake Microsoft's digital signature.