These malicious apps use unknown or unsupported compression methods for their APKs. When researchers or antivirus programs attempt to unzip and analyze the APK, they are unable to do so due to the unfamiliar compression method. As a result, the apps can’t be deemed malicious based on the traditional analysis methods used by antivirus software.
