Since its launch, Google Play Protect has been scanning installed apps for malware, however this still does not guarantee that customers’ banking apps are 100% safe. Hackers merely need to gain access to the one-time password (OTP) that users received through SMS, enter the right verification code, and they can easily access the victim’s bank account.

Fraud protection on Google Play Protect

Play Protect will now check on the permissions an app requires, the ones that hackers most frequently abuse: RECEIVE_SMS, READ_SMS, BIND_Notifications, and Accesibility. This is a brand-new functionality that Google revealed for the Play Protect. Hackers can view incoming SMS messages and notifications with these permissions, and they can even use the device without the user’s awareness with accesibility permission.

Since this functionality was developed in collaboration with Cyber Security of Singapore, Google only makes it available in Singapore for now. Users in Singapore will be the first to receive this fraud prevention tool from Google. This is a new feature from Google that always keeps an eye on what apps are doing in the background regarding permissions.

Google states that this allows users to use banking apps safely. Play Protect fraud protection kicks in when users install a third-party application, such as an APK file downloaded from the internet. If the app requests all 4 permissions, a report will be provided to the user.

It’s a really smart move to check these four permissions: RECEIVE_SMS, READ_SMS, BIND_Notifications, and Accesibility. This stops hackers from spying on SMS and notifications coming into the user’s phone, thereby limiting users’ data given to the app so hackers can’t access the user’s bank account.

Related:

• Google Officially Rebrands Bard to Gemini, a Unified AI Platform
• Alleged Google Pixel Fold 2’s leaked image, reveals a redesigned look
• Apple’s Browser Rule Change Offends Google and Mozilla
• Android Auto’s Major Redesign Elevates Experience with Google Assistant and Voice Replies
• Ex-Google Chief Eric Schmidt’s Startup Develops AI Drones for Ukraine

The post Play Protect gets a new update that works in real time to combat financial fraud appeared first on Gizmochina.

Google’s Android OS is available on billions of devices all over the world. Those devices are made by a plethora of manufacturers and some of these devices aren’t certified by Google. The tech giant wants that to change and has taken a big decision to fix that.

Last week, Android Police discovered that Google was locking users out of Google apps on devices that are not certified. Affected users are said receive a “Device not certified by Google” error message.

An official statement by Google (below) confirms the development:

“Certified Android devices offer users consistent experiences when using apps from Google and the Play Store, as well as various security benefits through Google Play Protect. We acknowledge that some manufacturers are building and selling devices that have not been certified by Google. Please see the website for more details.”

The website says certified devices go through hundreds of tests to ensure they “adhere to Android security and permissions model and have software builds with the recent security updates”.

Google adds that certified devices are required to ship without pre-installed malware and also include Google Play Protect which provides automatic virus scanning and Find My Device. New certified devices will also include the Play Protect logo.

For those with devices that are not Google certified, Google recommends you get in touch with the manufacturer or retailer for a fully tested and certified device.

However, there is actually a way for you to still use Google apps even after you have been blocked. Google provides an option for devices running custom ROMs but it requires your Google Services Framework ID. Google can’t actually tell if your device is truly running a custom ROM or not. So, if you get the error message, there is a link to a site where you can get exempted from the block.

The site requires you to sign in with your Google account details and then asks for your GSF ID. Getting the GSF ID is tricky but there are apps that you can use to extract the info. APKMirror has an app called DeviceID which can help you get the info, however, you must have Google Play Services installed to get the ID. Google will only allows 100 devices per user and it is reported that a factory reset may change your ID. So, anytime you do a factory rest, it counts against the 100 devices available.

READ MORE: Google Rebrands Android Wear As Wear OS

Even with the above bypass, it is better you get a device that has been certified by Google due to the security advantages it brings. It doesn’t cost a manufacturer money to get its devices Google certified but a lot of manufacturers still won’t do so.

(Source)

The post Google Blocks Its Services On Uncertified Devices appeared first on Gizmochina.