Google Play Protect

Reported Context (6)

“Beyond suppressing the install prompt, the plugins blind Google Play Protect for the duration of the install,” note the researchers. Preinstalled Android Malware Campaign Reaches Devices in More Than 150 Countries
the Google Play Store app, com.android.vending, which Bitdefender says is intended to prevent Google Play Protect from detecting the installation. Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones
two of them explicitly advertise APK crypting for Android apps, including one vendor claiming Google Play Protect evasion, which confirms this is not solely a desktop or server problem. Crypters and Similar Techniques Can Help Mobile Malware Evade Signature-Based Detection
Claims Google Play Protect evasion through APK obfuscation, trusted code-signing certificate, Android manifest morphing, Smali code and string obfuscation, resource renaming, optional junk code insertion, AV Report Details How Malware Crypting Services Help Threat Actors Evade Detection
We ensured Google Play Protect, Android’s built-in security protection, automatically warned users and disabled applications known to incorporate NetNut SDKs, and the system will continue to protect users against future Google Disrupts NetNut Residential Proxy Network in Coordinated Action

Malware (23)

People (1)

Threat Actors (5)

MITRE ATT&CK (74)

Vendors (24)

Products (31)

Tools (13)

Industries (6)

Countries (12)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.