> Now the question is, Does your phone verify the correctness of the APK, and does it make sure that it is actually an Analytics app? > > Broenink found that there is no validation at all to check which APK is getting installed to user's phone, which means there is a way for hackers to exploit this loophole.