It bypasses Android’s permission system that normally alerts users when applications seek to acquire access rights such as internet connectivity. When installed, it appears to have no access rights.