Today I visited my favorite news outlet using Firefox on my Android and suddenly I got malicious .apk file downloaded to my phone. Of course, I immediately reported the incident to the site owner.
While the site owner didn't fix the issue, what can I do to understand the attack more thoroughly? I don't have any control over the site.
I skimmed through the source of the main page but failed to find malicious JS. I plan to look at the .apk file itself after the issue is fixed, but for now I want to focus on the site.
BTW, I connect to the site over https.