Don, a student, came across a gaming app in a third-party app store and Installed it. Subsequently, all the legitimate apps in his smartphone were replaced by deceptive applications that appeared…

SMS phishing targets victims through fraudulent text messages to harvest credentials or redirect them to malicious sites, and no SMS-based deception is involved in this scenario.

A SIM card attack clones or hijacks a phone number by social engineering the mobile carrier to intercept calls and messages, which is unrelated to app replacement behavior.

While Agent Smith malware also spreads via third-party stores and replaces apps with ad-injected clones, it is a specific named malware family treated as distinct from the broader clickjacking classification applied in this question.

Clickjacking in a mobile context involves a malicious application overlaying or replacing legitimate app interfaces with deceptive ones, hijacking user interactions to serve fraudulent advertisements and generate revenue. The attack vector - a third-party app store install that silently substitutes genuine apps with fake look-alikes - is a characteristic mobile clickjacking technique where the victim perceives legitimate apps but interacts with attacker-controlled interfaces.