Microsoft has identified a significant security vulnerability in the Android operating system, leading to the emergence of the Dirty Stream malware. This malware, exploiting the flaw in Android's 'Content Provider' technology, enables hackers to pilfer information from installed apps, gather smartphone data, and remotely control devices by injecting malicious code.

The security flaw lies in the Content Provider technology, facilitating data exchange between apps on Android devices. Exploiting this vulnerability, the Dirty Stream malware infiltrates smartphones, accessing stored data and harvesting user information from various apps. Microsoft warns that billions of Android users are at risk due to this exploit.

The Dirty Stream malware has been detected in several popular apps available on the Google Play Store, with over 4 billion downloads collectively. Microsoft has identified two such apps, including a file manager developed by Xiaomi, downloaded over 100 million times, and 'WPS Office' by Kingsoft, with over 50 million downloads.

Following Microsoft's disclosure, Xiaomi and Kingsoft have updated the security of their respective apps to mitigate the risk posed by the Dirty Stream malware. Additionally, Google has revised its Play Store security guidelines and issued warnings to app developers.

To safeguard against the Dirty Stream malware, Microsoft advises users to install the latest versions of 'File Manager' and 'WPS Office' provided by Xiaomi and Kingsoft, respectively. These updates aim to enhance the security measures and protect users' smartphones from potential exploitation.