Google has launched a new pilot program in Singapore aimed at bolstering security measures against the installation of certain Android apps that exploit permissions to gain unauthorized access to sensitive data and one-time passwords. This initiative, integrated into Google Play Protect, seeks to automatically block the installation of such apps when users attempt to download them from external sources like web browsers, messaging apps, or file managers. By analyzing app permissions in real-time, the feature targets those frequently abused for financial fraud, such as permissions related to reading SMS messages, intercepting notifications, and utilizing accessibility services. These permissions are often exploited by malware to extract valuable information and compromise user privacy.

Eugene Liderman, Google's director of mobile security strategy, emphasized the prevalence of such abuses by fraudsters, particularly in intercepting one-time passwords and spying on-screen content. This initiative aligns with Google's broader efforts to combat mobile fraud and safeguard user security, urging developers to adhere to best practices and review their apps' permissions to ensure compliance with Mobile Unwanted Software principles.

Google also reported significant progress in detecting and mitigating new malicious apps through its real-time scanning capabilities, particularly in markets like India, Thailand, Singapore, and Brazil. The company identified over 515,000 new malicious apps and issued more than 3.1 million warnings or blocks to protect users from potential threats.

Meanwhile, Apple announced significant changes to the App Store in the European Union to comply with regulatory requirements, including the implementation of Notarization for iOS apps. Apple reiterated the risks associated with distributing apps through alternative marketplaces, warning users of increased privacy and security threats. The company emphasized its commitment to maintaining the integrity of the App Store ecosystem and protecting users from malicious apps.

As the mobile industry continues to evolve, both Google and Apple are taking proactive measures to enhance security and protect users from emerging threats, underscoring the importance of collaboration between technology companies, developers, and regulatory authorities in safeguarding user privacy and security.

Source: https://thehackernews.com/2024/02/google-starts-blocking-sideloading-of.html