Quiz — Android Threats
10-question quiz on APKs, fake apps, banking trojans, and spyware
Android Threats — Module Quiz
Ten APPLY items on what an APK is (zip of code; package name vs icon), Install unknown apps as a trust switch, chat and “cracked” sideloads skipping store review, Play Protect as a filter, clone Play listings, overlay and Accessibility refusal, OTP-on-a-surprise-prompt, and spyware clues with safety-first if someone close may be involved. Wrong answers still teach. You will not install samples. You will not build overlays, pack APKs, bypass Play Protect, or operate stalkerware. Fictional packages such as com.ultra.battery.example stay on paper. Notes stay in $HOME/cyberlium-lab with chmod 600 — no live bank secrets, no other people’s messages, no shelter addresses. Next after this quiz is Dangerous Permissions to Avoid: still YOUR Settings, still never unknown APKs, still never a bank or a stalkerware sample as a “lab.”
APPLY: Telegram sends UltraBattery.apk with a bank-like shield. A classmate wants to sideload it “in a profile to inspect.” What is an APK, and what do you do?
APPLY: You turned on Install unknown apps for Files for one work package and left it on. A later browser save in Files can now prompt install. Best habit plus Topic 5 carry?
APPLY: True or False: A “cracked” APK from a random site is as reviewed as Play Store, and a clean Play Protect scan means you should install it to finish $HOME/cyberlium-lab/apk-sources.txt.
APPLY: Two bank-like Play tiles. Listing A matches the developer on the bank site you typed. Listing B is “Official Pro” with 18 identical five-star reviews; an in-app Update ad opened B. What do you install?
APPLY: A Topic 5-style SMS says “update your bank app” with a Play URL. Safe habit?
APPLY: You open the official bank app. A full-screen re-login asks for password and SMS OTP right after a “cleaner” install. Select all defender moves. (Select 2)
APPLY: Fictional com.ultra.battery.example asks for Accessibility and SMS. Correct relationship to banking-trojan mechanism?
APPLY: After a partner borrowed the phone, overnight drain, unknown Accessibility, always-on location. Coercive control feels possible. First frame?
APPLY: True or False: Hidden icon plus unexpected Device admin on an app you did not choose can be a spyware clue, and $HOME/cyberlium-lab notes should be chmod 600 without live PINs, OTPs, or other people’s messages.
APPLY: After this module, which lesson opens Android Hardening, and which habits do you carry?