Last year, Google announced that Play Protect would prompt you to scan unknown Android apps before sideloading. Google is now piloting enhanced financial fraud protection for Play Protect.
Play Protect will “analyze and automatically block the installation of apps that may use sensitive runtime permissions frequently abused for financial fraud when the user attempts to install the app from an Internet-sideloading source (web browsers, messaging apps or file managers).”
This enhancement will inspect the permissions the app declared in real-time…
Google is specifically looking for financial fraud apps that request the RECEIVE_SMS, READ_SMS, BIND_Notifications, and Accessibility permissions. They can be used by fraudsters to intercept one-time SMS or notification-based passwords and spy on screen content.
Based on our analysis of major fraud malware families that exploit these sensitive runtime permissions, we found that over 95 percent of installations came from Internet-sideloading sources.
Rolling out via Google Play services, this pilot is starting in the coming weeks for Android users in Singapore. After throwing up an “App blocked by Play Protect,” Google will provide an explanation to the user: “This app can request access to sensitive data. This can increase the risk of identity theft or financial fraud.”
Google has partnered with the Cyber Security Agency of Singapore (CSA) and notes how “this enhanced fraud protection has undergone testing by the Singapore government.”
Together with CSA, we will be closely monitoring the results of the pilot program to assess its impact and make adjustments…
There's something about the balminess of summer that makes you want to let loose. And the right soundtrack makes all the difference. Mixing hip-hop and R&B with Afrobeats, dancehall, and more, here’s a playlist to take you through those warm nights. Our editors regularly update this playlist, so if you hear something you like, add it to your library and keep the party going. Listen to Apple Music