Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone
PScout: analyzing the Android permission specification