Regarding recently emerging Skygofree trojan for mobile devices, having read the following article Secure list / Skygofree summary it is still unclear to me how the device is getting affected with that Trojan, article mentions that there are many android implants on the web landing pages, but what actually they are *.apk file disguised as *.jpg file or what actually?
Even if it's a *.apk file guised into *.jpg file that will not be run on targeted device because, due to the strict security policy of Android platform, you have to get permissions from user which will alert him/her, so IMHO that won't be very savvy move.
So coming back to my question, how do they have planned(SkygoFree team) to infect the mobile device if there wasn't any obvious path to do that other than loading direct *.apk file with all permissions? Where I'm sure that astute persons will immediately notice and terminate the attack.
Can you shed some lights on that ?