Millions of Android Devices At Risk of Man-in-the-disk Attack