Google has released its latest Android Security & Privacy Year in Review Report for 2018, highlighting an uptick in the number of potentially harmful application (PHAs) on Android devices. Specifically, the company says the threat continues to come from apps that re delivered through over-the-air updates or are pre-installed. Android is widely regarded to be less secure than iOS. Google has repeatedly said the platform itself is completely secure in its stock form. However, because it is an open solution, OEMs are free to change Android as they please. This can mean compromising Google's stock security refinements. For the last five years, the company has published the Android Security & Privacy Year in Review, which shows vulnerabilities that have affected Android and what threats the OS faces. Among the causes for concern during 2018 was a rise in PHAs on Android devices that have pre-installed application or are downloaded with a system update: “Malicious actors increased their efforts to embed PHAs into the supply chain using two main entry points: new devices sold with pre-installed PHAs and over the air (OTA) updates that bundle legitimate system updates with PHAs,” wrote Google in its Android Security and Privacy Year in Review 2018.
Google Says Android Attack Vectors Growing but Affected Devices Down
Google’s Android Security & Privacy report shows potentially harmful apps are increasing, but devices are better at blocking them.