You must log in or # to comment.
TL;DR - You have to install a malicious app that pretends to be something else, then the app will try trick you into installing another APK (to which you have to specifically agree), and then your phone gets malware.
So nothing new
If you install malware then it gets installed!
Crazy.