A major threat to electronic payments security?

was distressed to see this blog in Yahoo!Finance talking about how hackers are able to breach two factor authentication in real time...but only for Android apps (it says), and only for apps bought through "unofficial" Apps stores (not Google's Play store)...how serious is this? welcome input from those more expert in such things.