Comment by zhongjiewu

You would never be able to install an app without user click "install" etc.

This one uses Javascript Bridge vulnerability to execute high privilege code in your Android. The attack code is javascript to be interpreted to Java calls in Android.

You wouldn't be able to do that in iPhone though.