.apk是Android上可执行的唯一类型的文件（不是root）吗？

Question

更准确地说，.apk是唯一可能具有恶意行为的文件吗？

Answer 1

The short answer is that any file can be malicious, regardless of file extension. What is more important is the contents, and what is opening/parsing the file in question. For example, someone could send you a malicious .mp3 , which infects your system by exploiting a vulnerability in the music player that loads it.

While any file can be malicious, I would say .apk 's have the most potential to be malicious. The interesting part is that the Android team probably has invested some serious effort into protecting the loading of .apk s and so it is probably unlikely that just opening a .apk will do harm. Only if you allow the program to install with any invasive permissions will you be open to attack.