Android malware that sidesteps the measures introduced by Google in March, to restrict the use of SMS and Call Log permissions and thus prevent credential-stealing apps from abusing these permissions and bypassing SMS-based two-factor authentication, has been discovered by Slovakian security firm ESET.