Play Protect feature

AppWizard
March 31, 2025
Google's AI-driven threat detection and security measures blocked approximately 2.36 million policy-violating applications from being released on the Play Store last year. In February, Google removed hundreds of malicious applications that were infecting devices with adware and malware. Over 50 times more Android malware originates from internet-sideloaded sources compared to those found on the Play Store. Google is expanding its Play Protect feature across all applications and the upcoming Android 15 will introduce live threat detection. Sophos warned about PJobRAT malware, which can steal SMS messages, contacts, and files from infected Android devices. Experts advise against sideloading apps unless their legitimacy and security are certain.
AppWizard
December 23, 2024
The Amazon App Store is hosting a potentially harmful app named BMICalculationVsn, marketed as a body mass index (BMI) calculator. Developed by PT Visionet Data Internasional, the app has been flagged as spyware by McAfee Labs, raising privacy concerns due to its requests for sensitive information such as passwords, payment details, and audio recordings. The app has thousands of installations and has been identified as a security threat since October 8, 2024. Users are advised to keep their Play Protect feature active to mitigate risks associated with third-party app stores.
AppWizard
November 7, 2024
The latest APK teardown of the Google Play Protect app has revealed a temporary pause button that allows users to disable Play Protect for a limited time while side-loading apps. This feature will automatically reactivate Play Protect after one day, enhancing user flexibility while maintaining security against malware. The pause option is currently in testing, and its future rollout across Android devices is uncertain.
AppWizard
November 6, 2024
A potential update to the Google Play Store is expected to enhance the sideloading experience for Android users by simplifying the process and improving security measures. The update will introduce a temporary pause function for Play Protect, allowing it to be disabled for a maximum of one day during sideloading, which addresses the current need for users to manually disable and later reactivate the feature. The timeline for this update is unclear, but it may coincide with the release of Android 16.
AppWizard
October 3, 2024
Google is enhancing its Play Protect feature to target sideloading practices for certain Android applications in India, following a pilot program in Singapore. The update will block the installation of apps that request sensitive permissions often abused for financial fraud, such as reading incoming one-time passwords or monitoring user activity. This feature will analyze app permissions in real-time and specifically look for frequently abused permission requests. The new feature will not affect apps from the Play Store or reputable third-party app stores, focusing only on apps from Internet-sideloading sources. The pilot program in India is set to begin next month, with a gradual rollout planned for all Android devices in the country. The initiative is already operational in Singapore, Brazil, and Thailand, where it has blocked nearly 900,000 high-risk installations in Singapore.
BetaBeacon
October 1, 2024
Google's VP of Engineering, Dave Kleidermacher, responded to Epic Games' lawsuit against Google and Samsung over the Auto Blocker feature, stating that the lawsuit is baseless and poses a danger. Kleidermacher emphasized that Google did not request Samsung to create the Auto Blocker feature and that the issue is about user safety, not access to a game.
AppWizard
September 24, 2024
Recent findings from Kaspersky reveal the emergence of Necro Trojan malware in popular Android applications, posing significant risks such as unauthorized access to personal data and online fraud. Despite Google's security measures, cybercriminals exploit vulnerabilities in the Android framework. Affected apps include Benqu's Wuta Camera, with over 10 million downloads, and the now-removed Max Browser, which had one million downloads. Modified versions of apps like WhatsApp, Spotify, and Minecraft have also been compromised. The Necro Trojan aims to take control of infected devices, executing harmful actions without user consent, including running malicious code and facilitating subscription fraud. Users are advised to uninstall suspicious apps, run antivirus scans, change critical passwords, and enable the Play Store's Play Protect feature for ongoing protection.
AppWizard
August 7, 2024
The Google Play Store is the main source for Android applications, but alternatives like the Amazon Appstore and Samsung’s Galaxy Store exist. Sideloading, which involves manually installing APK files, offers both benefits and risks. It allows developers to bypass Play Store restrictions and users to install older app versions, but it also exposes them to potential malware. Google’s Play Protect feature scans sideloaded apps for security threats, and users can control app permissions. The future of sideloading is uncertain due to Google's push for Android App Bundles, which complicate offline sideloading. User engagement in sideloading varies, with some preferring to avoid it altogether.
AppWizard
August 3, 2024
A new SMS stealer malware campaign targeting Android users has been uncovered by ZLabs researchers from Zimperium. The malware is distributed through fake app advertisements on compromised websites and Telegram bots that promise free pirated apps in exchange for phone numbers. Once installed, the malware accesses SMS messages, allowing cybercriminals to capture sensitive information like one-time passwords (OTPs) used for financial transactions. Over 107,000 malware samples linked to this campaign have been documented, affecting victims in 113 countries, particularly in India and Russia, as well as Brazil, Mexico, the United States, Ukraine, and Spain. Users are advised to use Google Play Protect for protection against such malware.
AppWizard
July 30, 2024
Five applications have been removed from Google Play after being linked to a new spyware variant called 'Mandrake,' which has over 32,000 downloads, mainly from UK users. The affected apps are: AirFS, Astro Explorer (by shevabad), Amber (by kodaslda), CryptoPulsing (by shevabad), and Brain Matrix (by kodaslda). Mandrake spyware poses threats such as data collection, screen recording, command execution, simulation of user actions, file management, and app installation. Google has stated that its Play Protect feature is continuously improving to identify and mitigate threats, and it is enabled by default on devices using Google Play Services. Users can check or adjust Play Protect settings through the Google Play Store app.
Search