Google Bans Thousands Of Malicious Developers

Google has blocked 173,000 malicious developers and fraud rings, preventing over $2 billion in fraudulent and abusive transactions, the company said in its security blog post.
 
In 2022 Google prevented 1.43 million policy-violating apps from being published on Google Play. 
The Google Play Commerce security team also blocked fraudulent and abusive transactions that could've led to more than $2 billion in losses. 

The US tech giant also said it is also making it harder for malicious developers to get their software published on its Play store.

Over the year, Google also updated its Play Store to include a Data Safety section that details how apps collect, share, and secure users’ data. And it has removed large amounts of bad accounts and added phone, email, and other identity verification methods.

This process has helped them reduce the number of accounts used to publish apps that violate its policies.

Google has also been working on making the Android ecosystem safe for users. They have created stronger Android platform protections and policies that have prevented a large number of apps from accessing sensitive permissions over the past three years. Further, Google has launched an App Security Improvements program that has helped fix security issues that impact thousands of apps.

A Helpline pilot was launched in 2022 to give developers assistance on policy queries.  A new Google Play Developer Community is also in pilot, which will provide a platform for developers to discuss policy and more.

Unfortunately, despite all these efforts, malicious apps continue to make their way onto the Play store.

Google says,”Keeping Google Play safe for users and developers remains a top priority for Google. Google Play Protect continues to scan billions of installed apps each day across billions of Android devices to keep users safe from threats like malware and unwanted software.”

Google:   Oodaloop:     Infosecurity Magazine:      The Hindu:     Security Week:    Information Security Buzz:   

Bleeping Computer

You Might Also Read: 

Mobile Cyber Attacks: The Different Facets Of Smartphone Malware:

____________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« ‘Tyrannical IT’ Is A Critical Threat
Why Zero Trust Is Fundamental In Today’s Economic Climate »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Secmentis

Secmentis

Secmentis is a cyber security consultancy specializing in penetration testing, threat intelligence, and proactive defense for your IT infrastructure.

Core Security

Core Security

Core Security provides threat-aware identity, access, authentication and vulnerability management solutions.

Thinkst Applied Research

Thinkst Applied Research

Thinkst is an Applied Research company with a deep focus on information security.

Synectics Solutions

Synectics Solutions

Synectics deliver solutions for reducing risk, combating financial crime, and enabling organisations to meet their compliance and regulatory commitments.

ST Engineering

ST Engineering

ST Engineering is a leading provider of trusted and innovative cybersecurity solutions.

Gradcracker

Gradcracker

Gradcracker is THE careers website for Science, Technology (including Cybersecurity), Engineering and Maths university students in the UK.

Horiba Mira

Horiba Mira

Horiba Mira is a global provider of automotive engineering, research and test services including services and solutions for automotive cybersecurity.

Estio Training

Estio Training

Estio Training is a specialist digital and IT apprenticeships provider, dedicated to introducing new skills and developing existing talent in businesses across the UK.

SurePassID

SurePassID

SurePassID is a provider of highly secure, highly extensible multi-factor authentication (MFA) solutions.

KryptoKloud

KryptoKloud

KryptoKloud offer a suite of Managed Services including Security Monitoring and Incident Response as well as a full portfolio of Compliance, Governance and Audit solutions.

nsKnox

nsKnox

nsKnox is a fintech-security company, enabling corporations and banks to prevent fraud and ensure compliance in B2B Payments.

SLVA Cybersecurity

SLVA Cybersecurity

SLVA Cybersecurity excel at delivering security-as-a-service, fit-for-purpose, within the constraints of realistic budgets and business expectations.

ACI Learning

ACI Learning

ACI Learning - Training tomorrow’s industry leaders with formats for all types of learners in Audit, Cybersecurity, and IT.

Cerby

Cerby

Your team uses unmanageable applications that put you, your company, and your data at risk. Protect, secure, and accelerate your business automatically with Cerby.

Securonix

Securonix

Securonix delivers a next generation security analytics and operations management platform for the modern era of big data and advanced cyber threats.

Hushmesh

Hushmesh

Hushmesh is a start-up aimed at securing the world’s digital infrastructure by developing develop the Mesh, a global information space with automated security built in.