Android: intrusive ads install apps without users’ knowledge

Fake ads aim to install apps on Android smartphones without owner’s permission, report to our colleagues at Android Police. Citing statements on the Play Store or Reddit, the media claim that seemingly innocuous ads managed to bypass restrictions imposed by Google.

There are many comments in this regard on the page dedicated to the “Weather Home Page – Live Radar Alerts and Widget” application. “Be careful, this app downloads itself without permission. “I clicked on a pop-up window and the download started automatically.”refers to an Internet user. “The app installs itself and completely replaces your home screen without your permission.”adds a user. App for many Android users deliberately making removal difficult.

Pre-installed software lets you bypass Google protections

According to Android Police, the apps are based on: A system application called DT IgniteIt is a solution offered by Digital Turbine, an end-to-end solution provider for mobile technology companies. According to the media, this solution is capable of overcoming some security restrictions imposed by Google on Android phones.

Even more worrying, it appears that this workaround pre-installed in the code of some smartphones directly when leaving the factory. The solution, which basically functions as a backdoor, was established at the request of some American operators (T-Mobile and Verizon) to place applications on their subscribers’ smartphones. As a reminder, this is not the first time that questionable software has been pre-installed by manufacturers from the factory.

“DT software is built directly into the phone’s firmware. Some manufacturers do this to share advertising revenue, others do it because it’s required by a carrier that needs it on all its phones, for example.An Android developer who conducted the research on Reddit explains: According to Digital Turbine, it’s surprising that its software is used to install apps from ads. The company guarantees that in this particular case the broker must obtain the user’s consent. Digital Turbine states: solutions are approved by Google Play. The company is expected to make an official statement soon.

Source : Android Police