If you think brand new, just-out-of-the-box Android smartphones are immune from security vulnerabilities – think again.