NotCompatible.A infects a device using a drive-by download method, gaining entry into the device when user visits a compromised website.
NotCompatible.A operates like a drive-by download threat. It gains entry into a device when the user visits a compromised website, and then proceeds to downloading a package, update.apk.
But for the installation to begin, the user needs to click on it.
Once installed, the malware may also communicate with certain command and control (C&C) servers as evidenced by two addresses found in an encrypted file within the malware.
NotCompatible.A pretends to be a security update file