Google has introduced a new program allowing third-party Android app stores to install and update apps with one tap on Android 17 QPR2 or later, outside the U.S., after passing identity checks and malware screenings.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations may face potential security risks and operational challenges if they allow one-tap installations from untrusted third-party stores, despite the requirement for identity checks and malware scans.
Users affected
Users outside the U.S. could experience more streamlined app installations, but also face increased risk of unauthorized or malicious app installations, as long as the store is approved by Google.
