Play Services

AppWizard
March 29, 2026
A new feature in the Android version of Google Wallet includes an "About" section that displays both the current version of the Google Wallet app and the version number of the Google Play services app. This integration is significant as Google Play services is essential for the functionality of Google Wallet.
AppWizard
March 24, 2026
Google is implementing a new "advanced flow" for sideloading apps on Android to enhance security. This change will introduce multiple steps before sideloading can occur, including enabling Developer Mode, confirming the user's intent, and requiring a device restart and re-authentication. A mandatory one-day "security wait" will also be introduced, which can be verified through biometrics or a PIN, allowing users time to reconsider their decision. After this initial wait, sideloading can be enabled indefinitely or temporarily for seven days. Android will continue to warn users about unverified apps, and these changes aim to protect users from scams that pressure them into installing harmful software. Additionally, Google is planning stricter checks for app distribution and launching "limited distribution" accounts for developers.
AppWizard
March 20, 2026
Google will introduce a new Android developer verification process later this year to enhance user security and accommodate power users. This will include an "advanced flow" that allows users to disable the verification requirement and install software from unverified developers. Users must activate Developer mode, confirm they are not being guided by a malicious actor, restart their device, and undergo a mandatory one-day "Security wait" period for identity verification through biometric authentication or a device PIN. After this, they can install apps from unverified developers indefinitely, with a temporary option for seven days. Users will still receive a warning when installing apps from unverified developers but can choose to proceed. The rollout is set for August, alongside new developer verification requirements. Additionally, Google will offer limited distribution accounts for developers to share apps with up to 20 users without registration fees or government ID.
BetaBeacon
March 18, 2026
- Play Services version 26.10 introduces Wi-Fi Sync, which automatically shares known networks between devices - Play Store version 50.6 offers free trials for select premium games before purchase - Wear OS devices now display animated placeholders while Play Store pages load - Google has made it easier to update systems on Pixel devices with a new mechanism in Settings
Tech Optimizer
February 22, 2026
Security researchers have identified a new Android Trojan named PromptSpy that uses generative AI technology to enhance its persistence on compromised devices. Discovered by ESET researchers, PromptSpy leverages Google's Gemini AI model to analyze infected device screens and generate tailored instructions for embedding itself within recent apps lists. It includes a Virtual Network Computing (VNC) module that allows attackers full remote control over the device, enabling activities such as viewing the screen, performing actions remotely, capturing lock screen data, blocking uninstallation attempts, gathering device information, taking screenshots, and recording screen activity as video. The malware communicates with command-and-control servers using AES encryption and exploits Android Accessibility Services, making it difficult to remove. PromptSpy is distributed through a dedicated website and is financially motivated, adapting to various Android interfaces and operating system versions. ESET's analysis indicates that the malware is regionally targeted, with a focus on Argentina, and may have been developed in a Chinese-speaking environment. The same threat actor is believed to be responsible for both VNCSpy and PromptSpy.
AppWizard
February 19, 2026
Researchers from Kaspersky have discovered an Android backdoor named Keenadu, embedded in the firmware of devices, allowing it to infect tablets before they reach consumers. This malware, affecting over 13,700 users globally, primarily targets advertising fraud by hijacking browser search engines, monitoring app installations, and generating fraudulent revenue. Tablets from various manufacturers, including Alldocube, have been found compromised, with the malware likely inserted during the firmware build stage through a compromised supply chain. Keenadu has multiple variants, some hidden in applications, and employs evasion tactics based on device language settings and time zones. It cannot be removed using standard Android security tools, and users are advised to install clean firmware or replace their devices entirely.
AppWizard
February 18, 2026
Google has introduced several new features in Android 16 to enhance user experience: - Material 3 Expressive: A new design language featuring vibrant colors, unique icon shapes, and animations, initially exclusive to Pixel devices but now available on other devices. - Advanced Protection Mode: A security feature that activates Google Play Protect, restricts app installations to the Play Store, and includes spam protection and low-security network blocking. - Live Updates: Provides real-time notifications in the status bar and lock screen for updates from selected applications, allowing users to stay informed without opening apps. - Support for 16 KB Page Sizes: Improves performance by allowing more data to be processed on a single page, reducing CPU demand and power consumption, while still supporting legacy 4 KB page sizes. - Quick Share Redesign: Transformed into a full-screen application with an intuitive interface, featuring large toggles and a built-in file picker for easier file sharing and progress indicators during transfers.
AppWizard
February 17, 2026
A sophisticated Android malware named Keenadu has been discovered embedded in the firmware of various device brands, compromising all installed applications and granting unrestricted control over infected devices. It employs multiple distribution methods, including compromised firmware images delivered over-the-air, access via backdoors, embedding in system applications, modified applications from unofficial channels, and infiltration through apps on Google Play. As of February 2026, Keenadu has been confirmed on approximately 13,000 devices, primarily in Russia, Japan, Germany, Brazil, and the Netherlands. The firmware-integrated variant remains dormant if the device's language or timezone is associated with China and ceases to function without the Google Play Store and Play Services. While currently focused on ad fraud, Keenadu has extensive capabilities for data theft and risky actions on compromised devices. A variant embedded in system applications has limited functionality but elevated privileges to install apps without user notification. The malware has been detected in the firmware of Android tablets from various manufacturers, including the Alldocube iPlay 50 mini Pro. Kaspersky has detailed how Keenadu compromises the libandroid_runtime.so component, making it difficult to remove with standard Android OS tools. Users are advised to seek clean firmware versions or consider replacing compromised devices with products from trusted vendors.
AppWizard
February 13, 2026
Google is rolling out an update for Driving Mode on Pixel phones that allows it to trigger automatically when connected to the car's Bluetooth, addressing previous issues where it misfired or failed to activate. The update shifts the activation method from relying solely on motion detection to a Bluetooth-first approach. This feature is included in version 26.05.32 of Google Play Services and can be configured in the Settings app under Modes. Users can choose to activate Driving Mode using either Bluetooth or a combination of motion and Bluetooth.
AppWizard
January 27, 2026
Users have reported that the Google Play Store is not displaying available updates for certain system-level applications when automatic updates are turned off. As of January 22, 2026, several Google applications do not appear in the Pending downloads list, although users can still see an “Update” option in the app's listing. Applications such as Android System Intelligence, Google Partner Setup, and Settings Services have resolved this issue, with updates accessible through the Settings app. On September 4, 2024, the issue was reported to affect YouTube, where users received notifications about updates but found none in the Pending downloads screen. On July 11, the problem was noted again with Google Partner Setup, which is crucial for devices running Google Mobile Services, and devices running Android 7 or earlier will not receive updates for this app. On July 1, users were alerted to a missing update for Google’s Data Restore Tool, which can only be updated through a direct link in the Play Store. The original issue was first observed on February 6, leading to confusion among users due to discrepancies between notifications and actual update availability. This situation may reflect a strategic shift by Google regarding the management of system-level applications within the Play Store, requiring users who disable automatic updates to manually check for updates.
Search