Practical Mobile Forensics - Fourth Edition

How does Android malware spread?

An Android device can be infected with malware in several different ways. The following are some of the possible ways:

• Repackaging legitimate application: This is the most common method used by attackers. First, the attacker downloads a legitimate application and disassembles it. Then, they add their malicious code and reassemble the application. The new malicious application now functions exactly as the legitimate application does, but it also performs malicious activity in the background. This kind of application is commonly found in third-party Android app stores and is downloaded by many people.
• Exploiting Android vulnerabilities: In this scenario, an attacker exploits the bugs or the vulnerabilities ...