"Users who visit this site are asked to take a series of steps similar to what’s required with downloading the Amazon Appstore standalone app. That is, they have to request a link to the app download, then change their device’s security settings to allow for its installation."
Brilliant!
> Instead, the first time a user tried to download an app, they were prompted to “enable downloads” if they haven’t already adjusted their Android phone’s security settings to enable downloads from outside of Google Play. Amazon’s app also walked users through these steps making the entire process very simple.
So if you want to use Amazon's app store, either before or now you'd have to turn on "Unknown sources" for app installs. This doesn't change that.
Amazon's been recommending + allowing it for years, along with every operating system for decades.
"your version of WhatsApp is outdated, please update to the current version", and after a countdown (or the click of a link), it downloads a malicious apk to your phone.
I'm completely disappointed, since too many websites use AdSense, and sometimes I can't even check a website, because the redirection is too aggressive.
I understand that the people behind these shady advertisements use aggressive cloaking (ex. only injecting the malicious redirection when you are under a mobile network) to avoid being discovered.
There are tons of malware that ask for shady permissions on Google's app store.. ala battery optimizer -- why Google expose people to such crap?