It is the AT&T and Verizon implementation of LTE tool that is the culprit:
LTE Discovery is a powerful signal discovery and analysis tool that allows users to observe a wide range of useful network and signal information while aiding you in staying connected to the best connection possible.
Android does not seem to have the "appropriate permission model" for LTE networks so they are at risk.
T-mobile customers are no longer at risk though since the problem has been resolved there.
Apple is not affected.
More here