Installing fake applications seems to be very straightforward with this flaw.
This is easily done using FileObserver.
The Fortnite Installer will proceed to load the substituted (fake) APK.
On Samsung devices, the Fortnite Installer performs the APK install silently via the private Galaxy Apps API.
This API checks that the APK is installed has the package name com.epicgames.fortnite.
Consequently, the fake APK with a matching package name can be silently installed.
Epic Gameshas already responded to this problem and has even updated its system to circumvent this problem.
This is another point against the decision of Epic Games.
So, what do you think about this?
Simply share all your views and thoughts in the comment section below.
