To reduce financial scams, Google has started a new program to prevent users from sideloading certain apps in Singapore. The company is looking to block sideloaded apps that abuse Android permissions to read one-time passwords received through SMS and notifications.<\/p>\n
Google said there are four sets of permissions that bad actors exploit to commit financial fraud. According to the company\u2019s survey, most of these apps are sideloaded, which are installed onto the device manually \u2014 not through the Play Store.<\/p>\n
\u201cThese permissions are frequently abused by fraudsters to intercept one-time passwords via SMS or notifications, as well as spy on-screen content. Based on our analysis of major fraud malware families that exploit these sensitive runtime permissions, we found that over 95 percent of installations came from Internet-sideloading sources,\u201d the company said in a blog.<\/p>\n
The search giant said when a user in Singapore tries to install any such app, Google will automatically block the attempt with a message pop-up that reads: \u201cThis app can request access to sensitive data. This can increase the risk of identity theft or financial fraud.\u201d<\/p>\n
![\"\"](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/02\/HRA-gif-1.gif?w=188\")
<\/p>\nImage Credits:<\/strong> Google<\/p>\n<\/div>\n \u00a0<\/p>\n Google has developed this pilot in collaboration with the Cyber Security Agency of Singapore (CSA) as part of its Play Protect program.<\/p>\n Last October, the company announced a real-time scanning protection feature<\/a> \u2014 with the first rollout in India \u2014 to stop users from sideloading malicious apps. In November, TechCrunch performed a test with over 30 different malicious apps<\/a>. And while Google\u2019s protection feature blocked most of them, some predatory loan apps were successfully installed.<\/p>\n \u201cWith this recent enhancement, we\u2019re adding real-time scanning at the code-level to Google Play Protect to combat novel malicious apps, regardless of if the app was downloaded from Google Play or elsewhere,\u201d said Google spokesperson Scott Westover in an email to TechCrunch at that time. \u201cThese capabilities will continue to evolve and improve over time, as Google Play Protect collects and analyzes new types of threats facing the Android ecosystem.\u201d<\/p>\n Since then, Google has expanded the real-time scanning feature to new regions including Thailand, Singapore, and Brazil.<\/p>\n With the latest announcement, Google alerted developers that their apps should not violate Mobile Unwanted Software principles<\/a> and should follow guidelines.<\/p>\n Fraudulent loan apps have been a pain point for Google in geographies like India and Africa<\/a>. In India, Google has to face scrutiny as predatory loan apps and their representatives have harassed people<\/a> for repayment, driving some to suicide.<\/p>\n Last year, Google introduced a new policy to bar loan apps from accessing users\u2019 photos and contact details<\/a>.<\/p>\n<\/p><\/div>\n