We're still not sure how hackers obtained sensitive photos from celebrities' phones in the massive privacy breach known as Celebgate. The attackers may have used a phishing attack, researched the answers to their security questions, or simply guessed their victims' passwords by brute force. But here is another possible venue for hackers looking to grab private photos from targets' phones: a piece of malware, in the form of an Android game that surreptitiously downloads a user's photos.

This app may never have made it into the app market, and even if it had, it probably wouldn't have done much damage. There are already more than 100 Flappy Bird clones, so any newcomer is unlikely to attract a lot of downloads. Google also polices its market for apps that look malicious.

However, it's a good reminder that apps can contain malware despite many layers of protection in the major mobile app stores — and that's especially true of games purporting to be Flappy Bird.