SDK Spoofing is a sophisticated type of mobile ad fraud where fraudsters hack attribution tools (MMPs) to create legitimate-looking installs, fake clicks, or fake in-app events from real devices. 

Fraudsters perform SDK spoofing by creating mobile apps that have an SDK built into a Trojan APK. When users download those apps, fraudsters start sending fake attribution signals to MMPs. SDK spoofing can also be performed via zombie devices to fool attribution tools.  

Because SDK spoofing is about hacking mobile measurement partners (MMPs), aka attribution tools, the most preferred solution to detect and prevent SDK spoofing in real time is third party mobile ad fraud prevention tools.