In response to the new report Hiding in plain sight: PhantomLance walks into a market on a campaign that’s believed to have been underway for years, pushing spyware onto Android devices from the Google Play Store and other Android stores, an expert offers comments.
This once again demonstrates that Google Play Protect is a threadbare security blanket for Android devices and cannot be relied upon to protect against malware and malicious code. If your business allows Android devices into the workplace it is critical to manage them with a reputable EMM with threat detection capabilities, and to severely limit the applications that can be installed.
The hard truth is that most consumers are not willing to pay much or anything for mobile apps, which are extremely complicated and expensive to develop and maintain. This consumer behavior forces app developers to make a choice between generating advertising revenue, or monetizing user data – and the big money is in monetizing data. Until consumers embrace the idea of paying for apps that respect privacy, we will continue to see app developers harvest user data.