Dr. Xuxian Jiang's team found a data stealing vulnerability in Android v2.3. More details can be found here including the next steps in response to the discovery.