UAE users warned against downloading mobile applications shared through WhatsApp, Telegram and other unofficial channels. Cyber experts flag growing risks from malicious software.
The warning was issued at GISEC Global 2026 by Pushkar Singh, country head for the Middle East and Africa at Protectt.AI. He said that the UAE has a high volume of mobile app downloads, making users a potential target for attackers distributing harmful applications. Singh advised Android users to download applications only through the Google Play Store. iPhone users should rely on the App Store for their downloads.
“An authentic source means if there is a mobile application on an Android device, it should be downloaded from the Play Store, and if it is an iOS device, from the App Store,” Singh said.
Applications shared through messaging platforms can be modified before users install them. Singh said attackers can add malicious code to legitimate applications and use them to target devices.
He also urged businesses to strengthen security controls on employee devices. Security systems can identify unauthorized or modified applications and block them after installation.
The experts also raised concerns over the use of artificial intelligence in social engineering attacks. AI tools can help criminals create convincing voice and video impersonations.
“AI is a lot beneficial, it is creating immense efficiencies. But at the same time, there is a darker side, where AI is leveraged to manipulate transactions or create new threat vectors,” Singh said. Cyber experts also highlighted risks linked to VPNs and proxy services. Poorly understood routing methods can expose traffic to interception and create opportunities for attackers.
Ashraf Koheil of Group-IB said GCC countries were among the top 10 targets globally for supply-chain attacks in 2025. He also said phishing attacks targeting financial services accounted for 28.5% of such attacks across the Middle East and Africa. The warnings highlight the need for users and organisations to verify app sources before installation and strengthen security controls across connected devices.
Also Read: UAE, Saudi Arabia Account for Half of Gulf Cyberattacks