Malicious Android Ads leading to drive by downloads

Drive by downloads causing chaos
 
The Zscaler ThreatLabZ team recently identified an Android app that was downloading itself from advertisements posted on forums. Malvertising is a growing problem and one that we have covered on past occasions, especially given the rise in SSL sites that serve malicious ads.  On one such forum we found entitled “GodLikeProductions,” visitors complained about the automatically downloading app, but those messages were either removed or ignored by the forum's hosts, allowing the problem to perpetuate. In this particular instance, the app uses the insidious mask of a "security update" to get a user to complete the installation. 
 
Here is our detailed analysis of how the malicious app works. 
 
https://www.zscaler.com/blogs/research/m...-downloads
 
According to the Zscaler,”Once the app gains admin rights, it becomes impossible to remove it from the device. The traditional “Uninstall” option, by default, becomes disabled, because a user cannot remove apps with admin rights. Usually, one can uninstall such apps by first removing admin privileges via settings, but this app uses an unconventional method — registering as an Android receiver — to preserve its admin privileges.”
 
This malicious App Stats that, Once Victims tried to uninstall this app, suddenly phone gets locked for few seconds.
 
https://gbhackers.com/malicious-android-...d-devices/