[reprod]

I said the same thing but technically this is something entirely capable of happening if you have the "Unknown Sources" checkbox in Settings > Applications checked off. The app can be installed and take control of your Messages application and send out malicious texts. I have yet to run into this item but apparently this is something that is happening on Android handsets.

No indication of which OS versions are affected.