Imagine it like this:
1. someone writes some malicious App/software
2. uploads it to the Google Play Store (this is not unheard of)
3. that same person writes a bot script to download and or write reviews of the app
4. write a loop to change MAC address, IP, and otherwise fake its origin/connection
5. Run this for a few weeks and
??
6. Profit
This is the same way that botherders get more zombies, by using working torrents to get people to download malicious software or media. It's pretty ingenius in that it exploits the human web of trust and our natural instinct to trust something that is accepted by our peers. Social engineering at its best.
