How does Mobile Device Management tools (MDMs) identify mobile apps in order to allow to install only whitelisted applications?
First I though some kind of hash but because the APK changes in the Play Store I don't think so.
If it is the name in the application or other attribute in the Android manifest.xml probably it can be faked.
In fact, what I'm really worried about is this news that applications like Wifi Analyzer installed from alternative app stores have been trojanized...if my MDM allows Wifi Analyzer from Play Store would it also allow a trojanized Wifi Analyzer from an alternative app store? [Link to article]