How malwares keep sneaking pass Google Play's Defenses

[spaceoctopus]

The standard advice for Android users to avoid downloading malicious apps is simple: Only get apps from the official Google Play Store. Unlike third-party app stores that are generally difficult to vet and validate, Google Play has built-in mechanisms to screen every app for malware, ransomware, and assorted sketchiness. So why, then, has so much malware slipped through lately?

 

[brambedkar59]

Same way any AV can't detect 100% malware.

 

[Windows_Security]

My guess (based on what I read), is that Google uses automated analysis (including machine learning) to detect anomalies.

When software gets a pass, normally the chance and risk that updates are malware is lower.

Malware writers used this rating model to infect these programs directly or indirectly (infecting third party libraries or software modules used by these programs) and fly beneath this Google malware radar right into Google play store.

 

[Huchim]

So, and the same way as in windows we have options like anti-exes, or SRP, what about android? I already have an AV and adguard

 

[brambedkar59]

My guess (based on what I read), is that Google uses automated analysis (including machine learning) to detect anomalies.

When software gets a pass, normally the chance and risk that updates are malware is lower.

Malware writers used this rating model to infect these programs directly or indirectly (infecting third party libraries or software modules used by these programs) and fly beneath this Google malware radar right into Google play store.

I think that was the sole reason of them launching 'Play protect'.