News for hackers. Stuff that matters.

A comment on 2FA app with 10k Google Play downloads loaded well-known banking trojan. Parent comment

Re:2FA app with 10k Google Play downloads loaded well-known ... by ffpip on Friday January 28, 2022 @01:06PM (#30118227)
> You can install an apk from chrome/firefox, which doesn't have this permission.

I thought they just ask the OS to open the file, and when it happens to be a .apk file, Android brings up the package installer. Is that not how they do it?

[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by leppr on Saturday January 29, 2022 @08:51AM (#30126252)
You have to give app installation permissions to the app you open the .apk file from.
[ Parent | on HN ]