It’s been drummed into employees’ heads not to download apps from unvetted 3rd party sites – and for good reason: attackers infest fly-by-night websites offering cheap or free app downloads. But even when users do everything by the book, don’t assume the story will end on a happy note.
Both the Google and Apple app stores take extra measures to vet 3rd party apps submitted for inclusion. Yet, there are several instances in which existing safeguards failed to block malware-laden apps from getting uploaded.
It doesn’t happen all the time but just enough to make news.