text:  Method B: Self modifying the APK  This exploit can take advantage of the same vulnerability to mask what permissions the app really requires.  This vulnerability affects Android device users as well as Android app developers.  For Android device users, the users may end up with installing apps that are not the ones they agree to install.  Android app developers are also affected, because app-store apps and mobile ads libraries that do not rely on Google Play store would be likely to save the promoted apps in unprotected storage, e.g. /sdcard.