CONFERENCE CISO Forum Virtual Summit 2026 - View all Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

Google Play Protect Gets Real-Time Code Scanning

Google improves Android devices’ proactive protections against malware with real-time scanning at code level.

Google on Wednesday announced improved protections against malware for all Android devices with Google Play Services, in the form of real-time scanning at code level in Google Play Protect.

A built-in security feature, Google Play Protect scans over 100 billion applications daily, to prevent malware and unwanted applications from reaching Android devices.

Once it identifies nefarious software, Google Play Protect can either send a warning, block an application’s installation, or completely disable the software.

According to Google, cybercriminals rely on social engineering to trick users into installing malicious applications outside of Google Play, to infect their devices with polymorphic malware.

Google Play Protect can scan devices for harmful applications that have been installed outside of Google Play, warning users when it identifies suspicious software or an application known to be malicious.

Now, Google is stepping up Google Play Protect’s security capabilities with real-time scanning at the code-level, which will trigger when installing an application that has never been scanned before, prompting the user for a scan.

Advertisement. Scroll to continue reading.

“Scanning will extract important signals from the app and send them to the Play Protect backend infrastructure for a code-level evaluation. Once the real-time analysis is complete, users will get a result letting them know if the app looks safe to install or if the scan determined the app is potentially harmful,” Google explains.

The new capability, the internet giant notes, should help detect emerging threats, protecting users from malicious polymorphic apps that rely on various techniques, including AI, to modify their features and avoid detection.

“Our security protections and machine learning algorithms learn from each app submitted to Google for review and we look at thousands of signals and compare app behavior. Google Play Protect is constantly improving with each identified app, allowing us to strengthen our protections for the entire Android ecosystem,” Google notes.

The new capability is now rolling out to Android devices with Google Play services in India, but will reach all countries and regions in the following months.

Related: Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities

Related: Android Devices With Backdoored Firmware Found in US Schools

Related: Android Zero-Day Patched With September 2023 Security Updates

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

NOW LIVE: CISO Forum 2026 Summit

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Join to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.

Register

People on the Move

Cohere has appointed Jaya Baloo as CISO.

Jensen Huang has resigned as President and Chief Executive Officer at NVIDIA.

Sean Sweeney has become CIO of the City of Charleston, South Carolina.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.