One attack I personally had was when I had an android tablet and a client who has business in China asked me to put a promotional video on some Chinese version of youtube. So I thought I found the app in Play store, but once opened it asked me something in chinese, so just thinking this is obligatory privacy agreement or something, I click okay. Instead it started downloading an update, and rebooted. After my tablet was malware ridden and unable to be recovered, because older version of Android.

I learned that a lot of apps behave differently if they find a different language keyboard. I don’t know if this attack is still possible in Android, it’s been some years now.