Google Play Protect, which is available on Android devices with Google Play Services, now boasts an upgraded system to defend against polymorphic malware. Google Play Protect, a security system covering most of the 3 billion-plus active Android devices worldwide, scans a staggering 125 billion apps daily. This security feature aims to prevent malware and other unwanted software from infiltrating Android devices.
Polymorphic apps, a growing threat, are notorious for their ability to change their identifying features to evade detection. In response, Google has enhanced Play Protect to identify these malicious apps. The updated system utilizes methods like on-device machine learning and cross-checks newly installed apps against existing scanning intelligence to detect polymorphic apps effectively. It also recommends real-time app scans during installations for apps that haven’t been previously scanned. Users are then provided with information on whether an app appears safe or potentially harmful based on a code-level evaluation.
The update is introduced to combat the rise of polymorphic malware, which has proven to be a challenge for existing security systems, including Play Protect. Researchers have identified various Android malware strains, often disguised as legitimate apps like YouTube or Chrome. These deceptive apps tend to request broad system permissions, making them even more dangerous.
Moreover, Google acknowledges that links to malicious app downloads are frequently shared through “ephemeral sources” such as messaging apps, emphasizing the need for an advanced defense system. While the enhanced Play Protect begins its rollout in select countries, it is expected to be accessible worldwide in the near future.
This update underscores Google’s commitment to strengthening Android security and protecting users from evolving threats posed by polymorphic malware.
