Google Targets Android Malware with AI-Enhanced Live Threat Detection Service

Google is set to introduce a new system aimed at tackling malware on Android devices. This innovative live threat detection service utilizes Google Play Protect's on-device AI to scrutinize applications for any malicious activity. Announced after the Google I/O developer event on Tuesday, the service analyzes several factors regarding an app's usage of sensitive permissions and how it interacts with other apps and services.

If suspicious behavior is detected, Google Play Protect has the capability to escalate the app for further assessment by Google. It will also alert users who have the app installed and may even disable it if necessary.

This detection method benefits from Google’s Private Compute Core, the Android privacy infrastructure launched in 2022. The PCC provides an isolated environment for data processing within the Android operating system, allowing users to control the sharing of their data. By leveraging the PCC, the live threat detection feature can enhance user security without compromising personal information.

Google plans to roll out this service later this year for Google Pixel devices, with other manufacturers such as Oppo, Honor, Lenovo, OnePlus, Nothing, Transsion, Sharp, and more expected to follow suit.

This new service has the potential to reassure Android users about downloading and using apps from Google Play. However, many users prefer that malware be detected during the review process to begin with. This is a key area where Apple excels, consistently promoting the advantages of its App Store to both consumers and developers. While malicious apps occasionally slip through, Apple's rigorous review process eliminates many more before they are published, as evidenced by its announcement of preventing $1.8 billion in fraud on its App Store prior to the I/O event.

In addition to the live threat detection service, Google revealed plans to remove one-time passwords from notifications, mitigating a frequent attack vector for fraud and spyware. Android 13's restricted settings will also be expanded, now requiring additional user approval to grant app permissions when applications are sideloaded onto devices.

We’re launching an AI newsletter! Sign up here to start receiving it in your inbox on June 5.