Google: Less Than 1% Of Androids Have Potentially Harmful App Installed
Google's Android security report shows that devices that only install apps from the Google Play store have fewer infections.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Although Android is mobile malware authors' favorite target, the rate of "potentially harmful" Android application installations was cut nearly in half from Q1 to Q4 2014, according to Google's Android security year in review report released today.
The report includes information gathered from Google Play, the official Android app store; Verify Apps, which scans apps installed outside Google Play; SafetyNet, an app health check service for developers, and; Safe Browsing, which keeps an eye out for phishing sites and other malicious URLs.
Google found that fewer than 1 percent of Android devices had a "potentially harmful app (PHA)" installed in 2014. That number decreased to fewer than 0.15 percent on devices that only install from Google Play.
"Exploitation attempts were tracked for multiple vulnerabilities, and the data does not show any evidence of widespread exploitation of Android devices."
One of the vulnerabilities tracked was "FakeID," a vulnerability in Android's verification of digital signatures, exposed by Jeff Forristal of Blue Box Security at the BlackHat conference in August. (Forristal discussed it on DarkReading Radio live from BlackHat then.) According to the Google report:
In 2014, we blocked one instance of an app uploaded to Google Play that exploited [the FakeID] vulnerability. Outside of Google Play, Verify Apps also warns users about applications that exercise this vulnerability. Verify Apps identified 258 unique applications that exercise this vulnerability, and they were installed less than once for every 1 million installs checked by Verify Apps...
Many of the FakeID installs have characteristics that associate them with security research, and we have not identified any attempted exploitation that we would consider “malicious.”
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024