Google has unveiled a novel security initiative aimed at curbing the sideloading of dubious Android applications in India. This measure follows a sequence of comparable trials in Singapore, Thailand, and Brazil.
This advanced fraud protection tool is designed to shield users who attempt to install harmful apps from locations outside the Google Play Store, such as browsers, messaging platforms, or file explorers.
Initially introduced in Singapore in February, this feature has reportedly blocked close to 900,000 high-risk app installations in the region, according to the tech behemoth.
“This fortified fraud protection scrutinizes and preemptively blocks apps that frequently request sensitive permissions often misused for financial exploitation,” said Eugene Liderman, Google’s director of mobile security strategy.
The mechanism functions by scrutinizing third-party app permissions in real-time, identifying those that malicious apps typically misuse—such as reading SMS messages, accessing notifications, or exploiting accessibility services to deliver overlays and execute nefarious actions.
Should any of these permissions be declared within an app’s manifest file (“AndroidManifest.xml”), Google Play Protect will step in, automatically thwarting the installation on the user’s device.
The pilot initiative is expected to commence next month, with a gradual rollout planned for Android devices operating with Google Play services across the nation.
“For developers distributing apps potentially impacted by this trial, this is a prime moment to assess the permissions your app requires and ensure adherence to best development practices,” Liderman advised.
This development arrives nearly a year after Google introduced DigiKavach, which translates to “digital armor,” in India to address the rising tide of online financial fraud, shielding users from both scams and malware.
“Through this program, we’re analyzing scammer techniques, devising countermeasures against evolving threats, and responsibly sharing our findings with committed experts and allies to cultivate a safer and more resilient digital environment,” said Sanjay Gupta, head of Google India, in a statement back in October 2023.