Warning to Android users to stop downloading ‘malicious apps’ --[Reported by Umva mag]

Find out which apps are high risk

Oct 14, 2024 - 11:21
Warning to Android users to stop downloading ‘malicious apps’ --[Reported by Umva mag]
A phone screen showing a selection of Google apps
It’s thought the pilot will be expanded worldwide at some point in the future (Picture: Nicolas Economou/NurPhoto/REX/Shutterstock)

Google has issued a warning to stop downloading ‘malicious apps’ as it tries to improve safety on its phones.

In an attempt to catch up with the Apple iPhone, Google has flagged a number of Play Store app permissions which it considers high risk.

They have also introduced AI-powered live threat detection which could flag dangerous malware as soon as it appears on phones.

One of the major differences between Android and Apple phones is the ability to sideload apps onto Android phones from sources outside the official app store.

But recent analysis of major fraud malware found that more than 95% of installations came from sideloading sources.

Earlier this month, Google’s vice president Dave Kleidermacher warned that ‘Google and the security community have warned users for years about the real risks associated with downloading apps directly from the web’, Forbes reports.

An example of how users will be blocked from downloading potentially dangerous apps if they use Play Protect
Users trying to download a potentially dangerous app will be blocked by Play Protect (Picture: Google)

Four permissions on these apps which can lead to financial fraud include malware being able to intercept one-time passwords sent through SMS or notifications, or spy on screen content, to see inside banking and other apps.

Those permissions are:

  1. RECEIVE_SMS
  2. READ_SMS
  3. BIND_Notifications
  4. Accessibility

Google is now expanding its enhanced fraud protection campaign to India, following a successful pilot in Singapore.

Google Play Protect is a Play Store defence system which protects users from potentially dangerous apps, both within the Play Store and installed through sideloading.

A spokesperson said: ‘To better protect users in India against novel malicious internet-sideloaded apps we launched Google Play Protect real-time scanning.

‘This has already identified over net-new 10million malicious apps globally.

‘This enhanced fraud protection will analyse and automatically block the installation of apps that may use sensitive permissions frequently abused for financial fraud.

‘When a user in India attempts to install an application from an internet-sideloading source and any of these four permissions are declared, Play Protect will automatically block the installation with an explanation to the user.’

While the pilot is being tested in India at the moment, it’s thought the crackdown on permission abuse will be rolled out worldwide at some point.

So Google is warning developers to make sure their app permissions don’t go too far.

‘Now is a good time to review the permissions your app is requesting and ensure you’re following developer best practices,’ a spokesperson said.

‘Building a truly secure mobile experience is a collaborative effort, and we’re committed to working with governments, industry partners and other stakeholders to help you to be safer.’

Get in touch with our news team by emailing us at [email protected].

For more stories like this, check our news page.




The following news has been carefully analyzed, curated, and compiled by Umva Mag from a diverse range of people, sources, and reputable platforms. Our editorial team strives to ensure the accuracy and reliability of the information we provide. By combining insights from multiple perspectives, we aim to offer a well-rounded and comprehensive understanding of the events and stories that shape our world. Umva Mag values transparency, accountability, and journalistic integrity, ensuring that each piece of content is delivered with the utmost professionalism.