Install Hijacking

Mobile ad fraud in which malware detects a new install and fires a fake click to steal attribution credit for it.

By Brandon MinaCEO, BrandPilot AIUpdated November 2026

Short answer

Install hijacking is a type of mobile ad fraud in which malware on a device detects when a new app is being installed. It then fires a fake click just before the install completes, so the fraudster wins last-click attribution credit. Advertisers end up paying for installs that other sources actually drove.