How Sideloading Mandates Can Harm Users
A new malware campaign in India offers another reminder that bypassing trusted app stores can come with serious security risks
The scam relied on an important step: getting users outside the official app store. Indian authorities warned that cybercriminals were using sexually explicit ads to lure Android users into downloading malicious applications.
One advertisement examined by Reuters redirected users to a website purporting to offer pornographic content, where they were instructed to directly download a file called “Movexa.apk” rather than obtain it through an official marketplace. Malicious software associated with the campaign attempted to access information on victims’ banking credentials and make unauthorized transfers.
The episode illustrates why app distribution is a cybersecurity issue. Official app stores are not impenetrable, and malicious applications sometimes evade their safeguards. But generally speaking, they do a tremendous amount to keep users safe. Notwithstanding the salacious nature of the malware reported on by Reuters, the lesson is clear: devices’ limitations on sideloading can protect users from following interesting or engaging content down digital rabbit holes that lead to the rock bottom of malware or financial fraud.
That point is particularly relevant as policymakers around the world consider rules designed to force mobile operating systems to accommodate alternative distribution methods. Sideloading may provide users with another way to obtain software. And, of course, users who want the flexibility of sideloading may choose to do so. But policies that would prevent companies from offering more secure devices for users who prefer to sacrifice flexibility for safety should be rejected.
Published on September 3, 2026