I mean some ad, hijacking the page, before the click of some grandma registers, and volla! Now they’re on the play store about to download some “game” called royal kingdom and since they have the attention span of a gnat, they install it for a fun afternoon.

Or same hijack ad shows some bogus virus scan result, convincing grandma to click. Or drive-by download where it redirects to some infected pdf you end up downloading.

Yes, they all require a click, an install, some action. But it’s so cleverly disguised that unless you’re really diligent, someone’s going to get your credit card.

The worst are the drive-by downloads because a user doesn’t have to do anything. Once the pdf is on the phone, the phone access it, releasing the malware.