Google Play Protects now can scan APKs with YARA
Google Play Protects provides Android smartphones and tablets with anti-malware protection that offers the best security solutions. During these protections, Google also intervenes “upstream” by performing preventive checks of apps on the Play Store so that there is no problem with security and privacy in the user’s device.
Google Play Protects also provides the ability to scan APKs in apps installed locally from outside, and this feature will soon use the YARA model. After this, Play Protects should also be allowed to detect the network of malware so that all this malware can be prevented from reaching the device.
Google has also tested the YARA model to crawl APKs. A new flag has been found in Play Store version 41.7.16, which indicates that Google is also updating the local scanning capabilities of Play Product to integrate YARA. All these things will help identify and classify malware samples.
YARA takes a rule-based approach to identifying these malware samples and detects common codes, which also leads to all classifications.
In the future, the YARA model will be able to scan APKs, but it will not be as good as cloud-based scanning. However, it will help in basic scans. We may see these features in this upcoming update.
“If you like this article follow us on Google News, Facebook, Telegram, and Twitter. We will keep bringing you such articles.”
