Do Son Google is ending direct APK sideloading. By 2027, all Android apps must be cryptographically signed or face a mandatory 24-hour waiting period for installation.
Digital Signature
SonicWall and Microsoft uncover a campaign distributing a trojanized NetExtender VPN client that steals credentials by bypassing certificate validation.
Hackers are weaponizing legitimately signed ConnectWise ScreenConnect installers by using Authenticode stuffing to deploy malware and fake updates, leveraging social engineering.