"Ready to install" notification for app I don't remember installing

I got what appeared to be an update notification for the app ClashMetaForAndroid, but it’s not currently installed and I don’t remember attempting to install it. Reading the info about it, it’s not even entirely clear what it’s for. The Github has a ton of stars and forks, but the userbase seems mostly Chinese (as is the documentation).

Grepping for it in the log, I see:


The last one, I think, is when I accidentally invoked the install flow by tapping the notification, and the install failed.

Any idea what’s going on here? Did I accidentally do this while half-asleep? Does this indicate a malware infection that has tripped over its own foot somehow?

are you sure you didn’t mistap install on it while scroll around the app?

(it is a proxy app)

if malware is running there are far easier way to run more malware than kindly ask F-Droid and the user to do it.

I haven’t been browsing for apps recently, and I probably wouldn’t’ve looked at that one. However, I just tested installing a different app, and apparently if you press back before the download finishes, the app appears in the update list.

It’s not impossible that I opened F-droid to check for updates, accidentally clicked on it from the “latest” tab, fat-fingered the install button, then pressed back and never realized until I saw the notification.

The reason I thought malware might want to do that is that it could possibly get more permissions by tricking the user into installing something.

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.