Hacker News new | ask | show | jobs
by array_key_first 117 days ago
I never said it was a sole check, I said it was a check. The reality is that app is not thoroughly tested and, even if it was, this would not catch all malware because, again, it's trivial to write malware that can pass a review period and flip on later.

First Google search https://www.malwarebytes.com/blog/news/2025/08/77-malicious-...

Here's 77 found by researchers and then removed. Relying on researchers to find malware isn't a very good bet.

If I were a betting man, I would say there are thousands of apps on the play store that you can classify as malware.

We will never know the true number because one of the primary goals of malware is to be as difficult to detect as possible. They're not going to declare they're malware, duh.

If you know of some algorithm to detect malware, I'd love to hear it. Evidently even trillion dollar companies cannot come up with one. To this day, the best way to detect malware is source code analysis and thorough behavior testing.

Google and Apple do neither. Those are just the facts. Do with that what you will, I don't care.

1 comments

That is actually hilarious, did you actually read the MO of those Apps?

>The core payload has been updated to incorporate a new keylogger variant of Anatsa. Additionally, the malware utilizes a well-known Android APK ZIP obfuscator for enhanced evasion. The DEX payload is concealed within a JSON file, which is dynamically dropped at runtime and promptly deleted after being loaded.

I wonder if there is anything that Google can do to prevent this specific attack. :)

If you're wondering, I didn't read the link at all. The fact that malware exists on the play store is undisputed and I think everyone, except you, agrees with me. So I don't feel it requires much, if any, research on my part.
>I didn't read the link at all.

What a quote. My word.

You don't need evidence for things that are obviously true and already proven by simple probability and reasoning. If I really wanted to be an asshole, I could just prove there's malware on the play store by asking you to prove that there are no apps which do not contain malware, which of course nobody can do.

It's a big repository, it's a lot of code, and Google has read approximately 0% of it. Fucking obviously there's malware, it's not rocket science.

My biggest mistake is humoring people who either play stupid or are so stupid that they can barely function. Why do I do this? Is this a form of masochism? Is there a medicine for this? And, if so, is it in-network?