Since the first release, Android has required developers to sign their applications. When you update an app, Android will compare the update’s signature to the existing version. If they match, the app update will install. This way, developers don’t have to worry about modified APKs causing problems, and users are kept secure.

GuardSquare, a security firm based in Belgium, published a report today about a vulnerability it discovered in Android.

Read More

‘Janus’ vulnerability allows attackers to modify APKs without changing signature, APKMirror already protected was written by the awesome team at Android Police.

Source link