2 ms·

First you would have to crack Google public key system or modify your Android to not check signatures on installed packages. There are easier and sneakier ways

First you would have to crack Google public key system or modify your Android to not check signatures on installed packages. There are easier and sneakier ways to install malware on a phone you control completely that do not require messing with cryptography at all.

izacus 9y ago
Any additional malicious APK next to Gapps wouldn't have to be signed with Google keys to do harm.