Connect with us

E-Business

Cybersecurity Implications of the New App Verification Introduced by Google

Published

on

Kindly share this post

With a goal to curb malware and financial scams, Google has announced a new policy requiring developer verification for all Android app installations on certified devices – those with preloaded Google Mobile Services (like Samsung, Pixel, and others) — starting in 2026, extending beyond the Google Play Store to include sideloading and third-party app stores in an effort to curb malware and financial scams.

Currently users can install apps on devices running Android in different ways – they can download them from Google Play or other available stores, but also sideload them from APK (Android Package Kit used to distribute and install apps on Android OS) files, bypassing store moderation.

The new “ID check” is going to verify developers’ identities. The rollout begins with verification access in October 2025 for select developers, opens to all in March 2026, and enforcement starts in September 2026 in “high-risk” countries like Brazil, Indonesia, Singapore, and Thailand before going global in 2027.

Google’s new developer verification policy for Android apps is a timely response to an evolving mobile threat landscape.

According to Kaspersky’s report, attacks on Android smartphones in Q1 2025 increased, with the number of detected malware samples reaching 180,000 (up 27% from Q4 2024). Threats were blocked on devices of over 12 million smartphone users (up 36% from Q4 2024). The upward trend in attacked users has continued since Q3 2024. Common threats include phishing apps and stealers disguised as legitimate software.

Advertisement

“A major security issue in this landscape is the ability for users to install unverified apps from outside stores. These direct downloads bypass additional safeguards such as Google Play checks before app publication.

While installing unverified APK files offers flexibility for power users, it essentially turns the device into a potential entry point for attacks, underscoring the need for stricter controls”, comments Tatyana Shishkova, Lead Security Researcher, Global Research and Analysis Team at Kaspersky. “Overall, requiring verification for all app developers who want their apps to run on Google-certified devices is a positive step forward in bolstering Android’s security”, she added.

The new verification policy will apply only to Android devices with preloaded Google Mobile Services and Play Protect; smartphones running de-Googled ROMs, such as those on LineageOS or Android versions without Google Services (like Huawei devices), remain unaffected and can continue to sideload unverified APK files.

Despite Google Play’s security measures, malicious apps still infiltrate the store, with thousands of downloads identified in 2025 alone, often masquerading as legitimate software to steal data or deliver malware.

These threats, including trojans and phishing apps, exploit gaps in app review processes and user trust, underscoring that even official stores aren’t immune to the Android malware surge. Kaspersky found malware on Apple’s AppStore as well. So it’s important for users to be aware of risks when installing apps from any source, and use a trusted mobile protection solution, such as Kaspersky for Android.

Advertisement

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

HURIWA, CLO Protests Bill Asking Social Media Firms’ to Open Shops Nigeria

Published

on

Kindly share this post

Human Rights Writers Association of Nigeria (HURIWA) has opposed a bill seeking to compel major global social media companies to establish physical offices in Nigeria.

HURIWA, CLO Protests Bill Asking Social Media Firms’ to Open Shops Nigeria

The rights advocacy group urged the National Assembly to discard the proposed legislation, warning that it could become a tool for censorship and undermine citizens’ constitutional right to freedom of expression, despite being presented as a measure to strengthen Nigeria’s digital economy and improve corporate accountability.

The position was contained in a presentation submitted yesterday by Emmanuel Onwubiko, national coordinator, HURIWA, to the chairman of the Senate Committee on ICT and Cyber Security.

The bill, sponsored by Senator Ned Munir Nwoko, has already passed second reading in the Senate and is before the committee for further legislative consideration.

HURIWA said it carefully reviewed the proposed legislation and concluded that compelling global technology companies to establish offices in Nigeria was unnecessary and potentially counterproductive.

Advertisement

The organisation argued that while the firms generate substantial revenue from Nigeria’s vast digital market, they already engage Nigerians through existing structures, including paying eligible content creators, working with local technology professionals and participating in legal proceedings whenever required.

According to the group, appointing local representatives where necessary would adequately address concerns about engagement with regulators and users without forcing the companies to maintain physical offices.

It also dismissed claims that mandatory country offices would significantly improve consumer complaint resolution, technology transfer or employment generation.

HURIWA maintained that the platforms already have effective feedback mechanisms for resolving users’ complaints and routinely appear before Nigerian courts through their representatives whenever litigation arises.

The group, however, said its greatest concern was the potential for the proposed law to be used as an instrument for restricting freedom of expression.

Advertisement

It argued that establishing local offices could expose global social media companies to pressure from government authorities to remove online content considered critical of those in power.

According to the rights group, the presence of social media companies in Nigeria could become an avenue for authorities to pressure them into abandoning internationally recognised digital rights standards in favour of politically motivated content moderation.

It recalled previous attempts to regulate social media in Nigeria that generated widespread concerns over possible restrictions on free speech, stressing that any legislation affecting the digital space must contain clear safeguards against abuse.

The organisation warned that the proposed law should never become “a backdoor mechanism for government surveillance, arbitrary content removal or political censorship.

 

Advertisement

Kindly share this post
Continue Reading

E-Business

Nigeria Leads Africa in Online Gambling Regulation – GCI

Published

on

Kindly share this post

Nigeria has emerged as one of Africa’s most regulated online gambling markets, even as illegal operators continue to dominate the continent, according to a new report by Gaming Compliance International (GCI).

Nigeria Leads Africa in Online Gambling Regulation - GCI

The report, the first comprehensive assessment of online gambling across all 54 African countries, showed that Africa’s online gambling Gross Gaming Revenue (GGR) reached $23 billion in 2025.

However, only $5.2 billion (23 per cent) was generated by licensed operators, while $17.8 billion (77 per cent) remained in the unregulated market.

In West Africa, total online gambling revenue rose to $4.8 billion in 2025 from $4.3 billion in 2024. Of the 2025 figure, regulated operators accounted for $1.5 billion (31 per cent), while $3.3 billion (69 per cent) flowed to unlicensed platforms, highlighting the region’s persistent enforcement challenges.

Nigeria stood out as the region’s strongest performer, recording the lowest unregulated market share at 56 per cent, compared with the West African average of 69 per cent and the African average of 77 per cent.

Advertisement

The study also found that online gambling participation across Africa increased from 198 million people (13 per cent of the population) in 2024 to 215 million (14 per cent) in 2025.

Despite this growth, GCI estimated that illegal operators deprived African governments of about $3.55 billion in tax revenue in 2025. The number of unlicensed gambling platforms targeting African consumers also rose to 4,129, up from 3,644 in 2024.

Commenting on the findings, Matt Holt, chief executive officer, GCI, said the report provides regulators with the first continent-wide benchmark for strengthening oversight and consumer protection.

Ismail Vali, president, GCI, urged governments to develop competitive and well-regulated markets that encourage consumers to patronise licensed operators, boost public revenue and attract greater investment.

Online gambling in Nigeria is regulated by the Nation Lottery Regulatory Commission.

Advertisement

Kindly share this post
Continue Reading

E-Business

Kaspersky Warns Mobile‑data Buyers about Scammers Posing as Telecoms Operators

Published

on

Kindly share this post

At the height of the Northern Hemisphere tourist season, demand for communications and mobile Internet services rises sharply. Kaspersky’s security experts have uncovered scams that target anyone purchasing mobile connections or SIM cards worldwide.

Fraudsters create counterfeit websites that look like the portals of major regional and international telecom providers to trick users into revealing their phone numbers, personal details or banking information.

Kaspersky is sharing several examples of these fake login pages that mimic legitimate telecom operator sites and giving recommendations on how not to be deceived.

In the first case, scammers exploit the brand name of an international telecommunications company operating services in Asia, Africa and Europe. Fake authentication pages encourage users to put in their phone number and credentials.

While the first example shows the different design, the second scam site closely mimics the original log in page, making it hard for users to tell the difference and spot a fake. Entering authentication or payment data on fraudulent web sites may result in money or data loss and become a reason for more frequent spam and fraudulent calls.

Advertisement

Another example is a scam page which poses as another international communications company, working in North Africa, the Middle East and Southeast Asia. In this scheme scammers encourage users to top up their mobile data/Internet plans by entering their personal information and bank cards details.

Kaspersky experts have also identified a scam when cyber criminals suggest users enter their personal data to check and pay a bill inquiry. Such scam schemes are usually aimed at gaining victims’ personal data for further fraud or account hacking and stealing money.

“Because of the active use of AI, scammers can now create fake pages with ever increasing accuracy and speed, targeting the most popular user interest areas. We constantly see scams revolving around sports events, music concerts, seasonal sales and holidays. Unfortunately, the telecoms industry is no exception.

To keep your data and money safe, be vigilant when purchasing mobile or Internet plans online. Using an eSIM – purchased through an official app – is one way to avoid fake telecom sites, as it eliminates the need to enter personal details on questionable web pages.

If you’re unsure about a site’s legitimacy, search for the brand name directly in a search engine and enable a security solution that blocks phishing links for you,” comments Tatyana Kulikova, cybersecurity expert at Kaspersky.

Advertisement

 

Kindly share this post
Continue Reading

Trending