sideloading applications

AppWizard
September 19, 2026
A new Android malware called RatHat has emerged, analyzed by researchers from Zimperium's zLabs. It spreads through deceptive smishing texts and malicious ads that lead users to counterfeit download pages for popular apps. Once installed, it manipulates Android's Accessibility Service to gain elevated access by enabling Wireless Debugging and retrieving authentication codes without user intervention. RatHat targets finance and banking apps to steal user IDs, passwords, and MFA codes, using techniques to obtain touch coordinates for PIN recovery. It can intercept SMS messages, gain limited control of the device, and reinstall itself. Users are advised against sideloading apps and granting unnecessary accessibility permissions. Google's Advanced Protection Mode and Malwarebytes for Android can help mitigate risks associated with RatHat.
AppWizard
September 1, 2026
Google has started rolling out a new process for sideloading apps on Android devices, which requires users to restart their devices and wait 24 hours before sideloading applications. Users must confirm if they were prompted by someone to enable sideloading, with warnings about potential scams. After the waiting period, users can allow sideloading for seven days or indefinitely. The new process does not affect sideloading via ADB. Many users have expressed concerns about the future of sideloading, fearing increased restrictions.
AppWizard
August 20, 2026
Google is rolling out an “advanced” sideloading flow for Android next month, introducing a one-time, 24-hour waiting period between activating app installations from unverified developers and the actual installation. Users must enable the “Allow apps from unverified developers” setting in Developer options to engage with this feature, which includes warnings during the waiting period. Installations via ADB remain unaffected, and users can disable developer options after enabling the new feature. The rollout is supported by the “Android Developer Verifier” app and will initially launch in Brazil, Indonesia, Singapore, and Thailand, with a global rollout expected next year.
AppWizard
July 16, 2026
In October 2024, a judge ordered Google to allow third-party app stores on the Android platform. Google has now decided to comply with this ruling, retracting its motion to amend the injunction. Changes are set to be implemented starting July 22, 2026, allowing third-party app stores to operate within the Play Store in the U.S. Developers' app listings will automatically be available to these stores unless they opt out. Third-party stores can offer apps from the Play Catalog if they pay an annual fee and meet certain criteria. However, questions remain regarding the integration of Play Protect security features and the assessment of third-party store security.
AppWizard
June 8, 2026
Google implemented new restrictions on the installation of applications from sources outside the Play Store. A poll by Android Authority found that 43% of 3,661 respondents regularly sideload applications, while just over a third reported doing so a few times. About 20% claimed they had never installed apps from outside the Play Store.
AppWizard
April 3, 2026
Google has imposed strict restrictions on sideloading applications on Android devices due to concerns about risks from external sources. A new malware named NoVoice has been discovered on Google Play, embedded in over 50 applications with at least 2.3 million downloads, potentially compromising that many devices. The malware seeks root access by exploiting vulnerabilities in older Android versions and can steal sensitive data and install/remove apps without consent. It is difficult to remove, as it installs recovery scripts that survive factory resets. However, Google has stated that devices updated since May 2021 are protected against this threat, and Google Play Protect removes these apps and blocks new installs. Users with devices updated after May 2021 are considered safe, while those with infected apps should consider their devices compromised.
AppWizard
March 20, 2026
Android enthusiasts expressed discontent over Google's announcement to restrict sideloading of applications for enhanced security. Developers of the third-party app store F-Droid criticized the restrictions. Google has introduced new policies to balance security and platform openness, allowing power users to sideload apps from unverified developers through a feature called Advanced Flow. Users must enable developer mode, complete a verification check, restart their devices, and undergo a 24-hour waiting period with additional authentication before installing apps. Users can choose to allow installations from unverified developers for seven days or indefinitely, but will receive warning messages and must confirm installations. The Advanced Flow feature is set to roll out in August.
Search