We have already seen multiple reports this year as dangerous malware has been caught targeting Android devices, some from the official Play Store. Now, Android users are starting to see a surprise new Google warning on their devices.
Google needs to act—that much is clear. The open nature of Android has proven a rich playing field for bad actors with increasingly sophisticated malware. The scale of the problem was made clear by the availability of DIY malware toolsets on Telegram. Attackers don’t even need to tackle the dark web anymore.
Now, as first reported by Mishaal Rahman on X, a new threat alert system is suddenly hitting some Samsung and Pixel devices. Google has started to release the next stage in its defenses, with new warnings appearing on Android devices as users browse the web. And while this was first seen in beta in October, users will not have picked that up and—judging by the reports—will be surprised when it appears.
“Google is rolling out a new ‘Android Safe Browsing’ page,” Rahman posted, “that lets you see which apps support the feature as well as a toggle ‘live threat protection’ which enables more accurate threat detection.”
The server-side system runs live in the background, and can “alert you to security threats, like harmful links and webpages… For example, you might get an alert if you tap a link in your news app that would take you to a known phishing site.”
Users can play with the new settings under the Security and Privacy menu on their Samsung or Pixel devices. As ever with Android, don’t expect an ecosystem-wide update anytime soon. All devices with Google’s Mobile Services installed should see the update in time, and it will feature as a core part of the Play Protect ecosystem.
Given the significant (and growing) threat from phishing, fraudulent websites, apps and updates, this new protection will be critical—assuming it works as billed.
We first saw indicators that Android Safe Browsing might be on the way back in October, with a Google News channel on Telegram showing beta screenshots and reporting that “there will be a new item ‘Android Safe Browsing’, whose description reads “Get alerts about threats from dangerous websites”.
“When the feature is turned off or you try to turn it off,” the channel explained, “ you will be warned that you will be protected by ‘an older version of Safe browsing’.’ This page is integrated in the latest beta version of Google Play Services v. 23.41.13 beta and is hidden from users for now.”
This is the second example of surprise new warnings seen recently by Samsung users. The other being the Android 14 app store ownership of specific apps and updates that had deployed to Pixel devices last year, but only started hitting Samsungs last month.
The theme is clear—Google is cleaning house. “We’re trying to strike a balance,” CEO Sundar Pichai explained last year. “We believe in choice, so on Android we allow you to sideload and install additional applications.” But he also described these defenses as being like seatbelts in cars—users get to choose whether to be protected. Or not. And, just like seatbelts, risks remain despite those protections.
In light of the last wave of malware warnings, Google told me told me that “Android has multi-layered protections that help keep users safe. Android users are currently protected against this by Google Play Protect, which is on by default on Android devices with Google Play Services. Google Play Protect can warn users or block apps known to exhibit malicious behavior, even when those apps come from sources outside of Play.” This is the latest example of those defenses shoring up.
I have reached out to Google for any specific comments on Safe Browsing, but the company is adamant it’s seen to be cleaning house, with the loose reputation of old put to rest. This backdrop is currently amplified by Apple being forced to open up to third-party app stores for the first time, under Europe’s DMA. All these changes are to be welcome, and just like seatbelts, the advice is to keep your security on.
As you wait for Safe Browsing to hit your device, maintain your vigilance. Don’t click links from messages or emails unless you trust the sender and recognize the legitimacy of the site. Never install apps from links. And remember, any apps you do install can play havoc with your phone and your data—so don’t take risks.
