Not good, not surprising...
According to Goldsmith, his team -- using the custom-developed CryptoPhone, which provides a hardened version of Android with a wealth of unique security features and patches a number of flaws present in the stock Android OS -- discovered dozens of fake cell phone 'towers' not belonging to any carriers which intercepted the device's signal, allowing the tower's owner to intercept any calls or communications and even 'remotely push spyware to the device.'
...
The fake towers may very well be operated by the government, Goldsmith says, but he also entertains the possibility that they could've been planted by a foreign government such as China to snoop on military communications. Regardless of the source or the intent, regular citizens are falling victim to the interceptors and running the risk of having their phone calls and even text messages intercepted by unknown parties.
Link
ECHELON anyone?