If you're running something with Android 4.x on it, you severely need an upgrade. That is a major security risk.

People do not put enough focus on keeping a reasonably updated phone/computer from a security perspective.