Security News > 2023 > October > Google Play Protect takes on malicious apps with code-level scanning

Google is enhancing Google Play Protect's real-time scanning to include code-level scanning, to keep Android devices safe from malicious and unwanted apps, especially those downloaded from outside of the Google Play app store - whether from third-party app stores or other sources.

Google Play Protect, introduced by Google in 2017, is a security suite for Android devices that protects users' devices and data from malicious apps.

"When a user tries to install an app, Play Protect conducts a real-time check of the app against known harmful or malicious samples that Google Play Protect has cataloged. The app is also checked by on-device machine learning, similarity comparisons and other techniques to confirm if it's suspicious," Google explains.

"Google Play Protect also offers new protections for emerging threats that were previously not scanned before. When Play Protect does not recognize any malicious code from the collected samples, it recommends a real-time code-level scan of the app to extract important signals for evaluation by Google. This helps combat novel malicious apps that may have been altered to avoid detection."

When installing apps from unknown sources, users may be asked to send unknown apps to Google.

"Our security protections and machine learning algorithms learn from each app submitted to Google for review and we look at thousands of signals and compare app behavior," Google noted.

News URL

https://www.helpnetsecurity.com/2023/10/19/scanning-sideloaded-android-apps/