Apple says sideloading apps into iPhone could undermine security

Android users have been tricked to download fake versions of apps like Netflix and Candy Crush. These fake apps can spy on users, take screenshots of their devices, view location, text messages and contacts, steal users’ login credentials, and make changes to users’ phones.

June 24, 2021 12:10 pm | Updated 12:13 pm IST

Apple believes sideloading apps into iPhone can make it less secure

Apple believes sideloading apps into iPhone can make it less secure

(Subscribe to our Today's Cache newsletter for a quick snapshot of top 5 tech stories. Click here to subscribe for free.)

Apple argued against mounting regulatory pressure to allow sideloading apps into iPhone, claiming that this would make it less secure and trustworthy for users. Sideloading is the process of downloading apps on a mobile device from a website or a third-party app store.

"Allowing sideloading would degrade the security of the iOS platform and expose users to serious security risks not only on third-party app stores, but also on the App Store," Apple said in a report.

It added that personal data stored on iPhones, like photos, location data, health and financial information, could be stolen as a result of sideloading. Such methods used to download apps on Android have led to cybercriminals launching ransomware attacks on users’ devices. If malicious apps are installed, users could be locked out of their phone, unless they pay a ransom.

Also Read | Apple CEO says proposed EU tech rules threaten security of iPhones

Android users have been tricked to download fake versions of apps like Netflix and Candy Crush. These fake apps can spy on users, take screenshots of their devices, view location, text messages and contacts, steal users’ login credentials, and make changes to users’ phones.

Other fake apps can even steal banking credentials and take over users’ bank accounts.

A recent ransomware scam involves an Android app masquerading as a COVID-19 contact tracing app. If installed, it encrypts all personal information, leaving an email address to contact if the user wants to rescue their data.

One app found on third-party Android app stores tricks users by pretending to be a system update. Once installed, it displays a “Searching for update” notification, as it gets access to and steals the user’s personal data like messages, contacts, and pictures.

0 / 0
Sign in to unlock member-only benefits!
  • Access 10 free stories every month
  • Save stories to read later
  • Access to comment on every story
  • Sign-up/manage your newsletter subscriptions with a single click
  • Get notified by email for early access to discounts & offers on our products
Sign in

Comments

Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of The Hindu and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.