Boffins bypass password protection with pilfering by phony programs

Google Instant Apps still needs a lot of work on security

Password managers on mobile devices can be tricked by imposter apps into handing over a user's passwords."