Google's Android Apps Get Public Verification to Stop Supply Chain Attacks

Google is expanding Binary Transparency on Android to publish cryptographic, verifiable logs of production binaries and provide verification tooling to detect unauthorized or modified releases; the announcement is motivated by recent supply-chain compromises (for example, signed DAEMON Tools installers used to deliver a QUIC RAT backdoor) and aims to make one-off malicious releases detectable.