Android users are being warned about a new bug called Arsink that allows hackers access to private data and gives them remote control of their phone.