#fortnite installer flaw

With news that Epic Games will create their own installer on Android for Fortnite instead of offering it on Google Play, came the fear of security issues. That fear was then realized when Epic Games and Google confirmed that the first version of the Fortnite Installer came with a major security flaw. To download Fortnite you would have to first download the Fortnite Installer, which will then get the game for you. According to Google's security team, the Fortnite Installer can easily be hijacked and commanded by another APK to install another app despite it thinking it's still downloading Fortnite. What the exploit does is that the malicious APK (any with the WRITE_EXTERNAL_STORAGE permission) intercepts the Fortnite Installer's installation of the legit game and substitutes it with a different APK. The Fortnite Installer will still think that it is downloading Fortnite despite the last minute interception. It's even worse with Samsung devices as the Fortnite Installer performs the installation silently via the Galaxy Apps API. All of this will happen without users even having a chance to allow the fake APK's permission requests because the Fortnite Installer does all the checking. Read more in our articles including "Epic's first Fortnite Installer had a major security flaw" and "HONOR 600 series launched, priced in the Philippines".