Apk | Scriptable

Joker malware often uses a scriptable APK pattern: the core APK is a clean "PDF viewer," but it downloads a Lua script that subscribes the user to premium SMS services without consent.