Sunday, September 17, 2017

Google Failing to Catch Obfuscated Malware

If you are an Android user, you should probably read this. 😔

At this year's I/O, Google announced Play Protect, a user-facing security screening process for apps on Android phones based on the old Verify Apps. Basically, it scans apps you install, comparing their content against known malware components, and notifies you if any potential risks are found. And it turns out, it's not infallible, as an older "packed" malware package was able to trick it.