Google has confirmed that more than 40% of Android devices are now vulnerable to new malware and spyware attacks, leaving over a billion users at risk.