Based off of the actual research ( https://research.checkpoint.com/simbad-a-rogue-adware-campaign-on-google-play/ https://research.checkpoint.com/simbad-a-rogue

Based off of the actual research ( https://research.checkpoint.com/simbad-a-rogue-adware-campaign-on-google-play/ https://research.checkpoint.com/simbad-a-rogue-adware-campai... ) it looks like TechChrunch just got critical details very wrong. The adware didn't "install itself" at all, it was just bundled into the app up-front. But the overwhelming majority of this attack, popping open URLs & showing ads, is something Q is looking to put a stop to wholesale: https://developer.android.com/preview/privacy/background-activity-starts https://developer.android.com/preview/privacy/background-act...