Mobile & Wireless

Google Play Protect Gets Real-Time Code Scanning

Google improves Android devices’ proactive protections against malware with real-time scanning at code level.

Google improves Android devices’ proactive protections against malware with real-time scanning at code level.

Google on Wednesday announced improved protections against malware for all Android devices with Google Play Services, in the form of real-time scanning at code level in Google Play Protect.

A built-in security feature, Google Play Protect scans over 100 billion applications daily, to prevent malware and unwanted applications from reaching Android devices.

Once it identifies nefarious software, Google Play Protect can either send a warning, block an application’s installation, or completely disable the software.

According to Google, cybercriminals rely on social engineering to trick users into installing malicious applications outside of Google Play, to infect their devices with polymorphic malware.

Google Play Protect can scan devices for harmful applications that have been installed outside of Google Play, warning users when it identifies suspicious software or an application known to be malicious.

Now, Google is stepping up Google Play Protect’s security capabilities with real-time scanning at the code-level, which will trigger when installing an application that has never been scanned before, prompting the user for a scan.

Advertisement. Scroll to continue reading.

“Scanning will extract important signals from the app and send them to the Play Protect backend infrastructure for a code-level evaluation. Once the real-time analysis is complete, users will get a result letting them know if the app looks safe to install or if the scan determined the app is potentially harmful,” Google explains.

The new capability, the internet giant notes, should help detect emerging threats, protecting users from malicious polymorphic apps that rely on various techniques, including AI, to modify their features and avoid detection.

“Our security protections and machine learning algorithms learn from each app submitted to Google for review and we look at thousands of signals and compare app behavior. Google Play Protect is constantly improving with each identified app, allowing us to strengthen our protections for the entire Android ecosystem,” Google notes.

The new capability is now rolling out to Android devices with Google Play services in India, but will reach all countries and regions in the following months.

Related: Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities

Related: Android Devices With Backdoored Firmware Found in US Schools

Related: Android Zero-Day Patched With September 2023 Security Updates

Related Content

Mobile & Wireless

A simple development setting bypassed protections designed to prevent unauthorized Android apps from accessing Microsoft account tokens, exposing billions of installations.

Mobile & Wireless

Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks.

Malware & Threats

Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access.

Mobile & Wireless

CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. 

Artificial Intelligence

The maximum reward for a zero-click Pixel Titan M exploit with persistence has increased to $1.5 million.

Mobile & Wireless

Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes.

Mobile & Wireless

The security hole affected an EngageLab SDK and it was reported by Microsoft to the vendor one year ago.

Mobile & Wireless

A critical DoS vulnerability in the Framework component of Android has also been fixed with the latest update.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version