Threat Actors Adapting Android Droppers Even to Deploy Simple Malware to Stay Future-Proof

This report details a surge in Android dropper campaigns in India and Southeast Asia where lightweight dropper apps bypass Play Protect by requesting minimal permissions, then download and install secondary malicious APKs (spyware, SMS stealers, miners) after user approval; the document outlines the multi-stage infection chain, evasion tactics, and shows example code for payload download and installation, warning defenders to correlate pre- and post-install scans and monitor sideloaded behavior.