Android is getting ready to add phishing protection

[ad_1]

Summary

  • Google is preparing a new feature for Android that can automatically detect fraudulent information to protect users from phishing attacks.
  • The app will analyze app activity for signs of fraudulent behavior and send app notifications to Google Play Protect if a threat is identified.
  • The exact details of how Android detects fraudulent applications are not clear, but it may include checking strings associated with passwords and user information for sensitive information.


No matter how tech-savvy you are, you’re not immune to phishing. Phishing, for those of you who don’t know, is a type of cyberattack used by hackers to trick people into giving up their sensitive information. Phishing attacks can be very sophisticated, so it’s important to always be vigilant and double-check the app or website you’re hosting. Your credentials are valid. In order to better protect regular users from phishing attacks on Android, it seems that Google is preparing a new feature that will automatically detect when phishing is used.

While digging the new Android 14 QPR2 Beta 2, I was able to reveal a hidden “check for cheats” page below. Settings → Security & privacy → More security & privacy. As soon as possible, it appears that this feature will check “app activity for phishing or other fraudulent behavior.” It will likely do this by scanning the app for other signs of fraudulent behavior. Google says that “the search is carried out directly on your device” and if phishing or other fraudulent behavior is detected, “some application information is sent to Google Play Protect to identify the threat and warn users.”

“Scan for malware” under Settings → Security & privacy → Better security & privacy

The exact information on how Android detects fraudulent applications remains unclear because Google has not published or shared any data in this area. A look at Android 14 QPR2’s decompiled source code reveals a new service called “ContentProtection” that will apparently try to detect when an app tries to display a website (to check the lines usually associated with passwords such as “password” , “pass word”, “code”) or ask the user for related items, such as “user” (for username ), “mail” (for e-mail), “phone”, “number”, “login”, “login” “, “logout j”. It seems that Android uses a block list to ensure that This device is used on some apps, and it seems to check if an app is an app or if it is requesting Internet access.

Estimated

Android 14 QPR2 Beta 2 comes with fixes for biometrics and battery data

Google’s beta for the March Pixel Feature Drop is underway

Anti-phishing is coming to Android along with other anti-phishing protections recently implemented by Google Play Protect. As far as the speed of fixing the malware to avoid detection, it remains to be seen if it is useful to use Android. However, any feature that improves security is welcome, and we hope that this feature can save at least two users from giving their login information to another malicious party. .

Leave a Comment