According to the researchers, Android devices that are no longer supported are at high risk, with the lack of an update to the operating system “potentially putting them at risk of data theft, ransom demands and a range of other malware attacks that could leave them facing bills for hundreds of pounds .”