“Fake apps spread by social engineering, such as by enticing users with the possibility of playing a popular game,” says Vaibhav Rastogi, a computer science research associate at the University of Wisconsin-Madison. “The vulnerability exploited here is not in the computer system but in the human.”