If you use an Android phone, a silent threat may have been sitting inside your device for months. Not a virus you downloaded.