New proposals by the UK Government are hoping to combat the growing threat of malicious acts and fraud in apps.

A new report on the threats generated by app stores has been released by the National Cyber Security Centre (NCSC), revealing that people’s data and money are at risk due to fraudulent apps.

The report shows that these apps can contain malicious malware created by cyber criminals or are poorly developed and can be compromised by hackers exploiting weaknesses in software.

The government has put out a call to UK technology firms to provide better protection for consumers and enhance security and privacy requirements for firms running app stores.

Under new proposals, app stores for tech such as smartphones, game consoles, TVs and other smart devices could be asked to commit to a new code of practice setting out baseline security and privacy requirements. This would be the first such measure in the world.

Developers and store operators making apps available to UK users would be covered, including Apple, Google, Amazon, Huawei, Microsoft, and Samsung.

The proposed code would require stores to have a vulnerability reporting process for each app so flaws can be found and fixed quicker.

Additionally, they would need to share more security and privacy information in an accessible way including why an app needs access to users’ contacts and location.

Commenting on the plans, Cyber Security Minister Julia Lopez said: “Apps on our smartphones and tablets have improved our lives immensely – making it easier to bank and shop online and stay connected with friends.

“But no app should put our money and data at risk. That’s why the Government is taking action to ensure app stores and developers raise their security standards and better protect UK consumers in the digital age.”

Millions of people use apps every day to shop, bank and make video calls and the UK app market is worth £18.6 billion.

However, there are few rules governing the security of the technology or the online stores where they are sold.

The NCSC report found all types of app stores face similar cyber threats and the most prominent problem is malware. The report concludes the government’s proposed code of practice will have a positive impact and reduce the chances of malicious apps reaching consumers across different devices.

Recommended

• Is it time to stop using passwords?
• Leader Insights | Thought email marketing was dead? Think again
• Scottish life sciences tech firms see huge investment boost

NCSC Technical Director Ian Levy said: “Our devices and the apps that make them useful are increasingly essential to people and businesses and app stores have a responsibility to protect users and maintain their trust.

“Our threat report shows there is more for app stores to do, with cyber criminals currently using weaknesses in app stores on all types of connected devices to cause harm.

“I support the proposed Code of Practice, which demonstrates the UK’s continued intent to fix systemic cybersecurity issues.”

The code follows a government review of app stores launched in December 2020 which found some developers are not following best practice in developing apps, while well-known app stores do not share clear security requirements with developers.

Our reliance on app technology is now more prominent than ever. However, newly released research has found a substantial disconnect between the value placed on apps and the robustness of their protections.

Global app protection company Licel illustrated that app security is not being taken seriously enough, particularly as Covid-inspired evolutions in device usage have emboldened attackers.

Licel CEO Ivan Kinash said: “During the pandemic, a torrent of phishing messages were pinging on people’s phones. While that did increase awareness of the device being a target, mobile apps are still a bit of a blind spot in cybersecurity.

“For example, most people assume that if an app is available to download from official stores, then it must be safe. The report debunks a few myths like this one.”

Get the latest news from DIGIT direct to your inbox

Our newsletter covers the latest technology and IT news from Scotland and beyond, as well as in-depth features and exclusive interviews with leading figures and rising stars.

To subscribe, click here.