Currently, developers who create “sideloaded” Android apps are exempt from Google’s verification requirements.

A new strand of malware uses Word files with macros to download a PowerShell script from GitHub. This PowerShell script further downloads a legitimate image file from image hosting service Imgur ...