Timing is everything. And just as Google confirms the latest in a succession of Android attacks, here comes an update that could let you know if you’re at risk. There’s not much peace of mind for phone users these days, with malware and scam warnings coming almost daily. But Google is taking action — and that’s to be welcomed.
The Android-maker’s most recent warning with its May security release relates to a memory vulnerability disclosed by Meta in March. It has been patched for Android 13 and 14, with those on the newer OS likely unaffected or protected. And it is especially painful for Samsung users, given the long delay in upgrading from Android 14.
There are several warning signs that your phone may have been attacked, and if you see any one of these you should immediately reboot; if that doesn’t fix the problem and you’re running the latest OS, you need to investigate. You can read about those warning signs here. But in short, look out for your phone running hot when not charging, your phone’s battery draining unusually fast, or your phone seeming to be sluggish when carrying out everyday tasks, such as opening apps or typing.
We already know Google is working on Advanced Protection Mode for Android, locking down high-risk functionality, including sideloading apps, insecure wireless connections and USB cable access, and risky web browsing. And now we know there may be more to come, with an update to let you know if you should worry your phone has been attacked.
As spotted by Android Authority in its latest Play Services teardown, this Intrusion Detection system “will collect a log of your device/network activities that can be accessed if you notice suspicious activity across your account or devices.” And given the obvious sensitivities, “Google’s code suggests this log is end-to-end encrypted and can only be accessed with your Google account password and device authentication.”
The new teardown indicates “activities collected as part of this log include USB events, app installs, Bluetooth connections, lock screen info, Wi-Fi, and browsing history.” While Advanced protection Mode has been billed as Android catching up with iPhone, this new Intrusion Detection system is something Apple would do well to copy.
We have already seen third-party apps offer tests to see if fragments of spyware or other malware are present on phones, but a system-level feature that can offer a swift diagnosis or at least data that can be checked for anomalies is a major step forward.
It’s assumed this will come with Android 16 and it’s not yet known if it will be wrapped into Advanced Protection Mode or will be offered separately. We will soon find out.
Either way, it’s needed.