NewApp Digest
search bot

developer credentials

Google Plans Extra Safety Checks for Android App Sideloading
AppWizard
January 20, 2026

Google Plans Extra Safety Checks for Android App Sideloading

Google is introducing an online developer verification system to enhance the safety of sideloaded Android applications. This feature will verify the authenticity of app developers when users sideload applications, requiring an active internet connection for verification. If a device is offline, users will receive a warning message indicating that the app developer cannot be verified. The verification system aims to provide transparency and empower users to make informed choices without restricting sideloading. Google has historically allowed sideloading but is increasingly aware of the associated security vulnerabilities. The company promotes Play Protect and has introduced warnings and safety checks to encourage cautious user behavior. Google acknowledges that many users rely on sideloaded apps for valid reasons and aims to ensure they are aware of the risks and can verify the trustworthiness of developers.
Android warning issued as fake apps spread DroidLock ransomware demanding payment
AppWizard
December 11, 2025

Android warning issued as fake apps spread DroidLock ransomware demanding payment

DroidLock is a newly identified ransomware targeting Android users in Europe, capable of locking users out of their devices and demanding ransom for access or threatening permanent data deletion. It spreads through deceptive websites promoting counterfeit applications and gains access to devices by monitoring user passcodes. Victims report ransom demands displayed on their screens, often accompanied by a countdown timer. The ransomware employs phishing tactics to lure users into downloading harmful software, which can lock screens, obtain app lock credentials, exploit device administrator privileges, capture images, and silence devices. While it has not yet reached the UK, experts advise users to download applications only from official sources like the Google Play Store and to verify developer credentials for third-party software.
Dangerous npm packages are targeting developer credentials on Windows, Linux and Mac - here's what we know
Tech Optimizer
October 29, 2025

Dangerous npm packages are targeting developer credentials on Windows, Linux and Mac – here’s what we know

Security researchers from Socket have discovered ten malicious npm packages that infiltrated the Node Package Manager ecosystem, mimicking legitimate tools and downloaded nearly 10,000 times. These typosquatted packages contain malware that bypasses application-level security to target system keyrings, allowing the harvesting of decrypted credentials and access to critical resources like corporate emails and databases. Users who installed these packages are advised to treat their systems as compromised, disconnect from the internet, revoke exposed credentials, wipe and rebuild the infected system, change passwords, audit npm dependencies, review logs for suspicious activity, and enable multi-factor authentication.
Search