>the malware campaign specifically targets older devices using previously known vulnerabilities.[1] There is no new exploit research here. That is a false stat

>the malware campaign specifically targets older devices using previously known vulnerabilities.[1] There is no new exploit research here. That is a false statement where you are implying a certainty that has not yet been established. A Google employee says that as far as they have been able to investigate, several variants use known vulnerabilities. In any case, there is indeed a giant security flaw when an application executing in a supposed sandbox can get root access. It points to severe design flaws in the application model as well as the underlying OS. The fact that elevation of privilege is almost expected should be unacceptable. Given the terrible state of security updates in Android, I would say it is worth drawing as much publicity as possible to these events.