I have written about the issues with keeping Android device securely patched, especially when contrasted with the Apple approach to iPads and iPhones. You can catch up with these considerations here:
Devices and Cyber Security – A Primer | Smart Thinking Solutions
This week though I have three good news stories for Android users – well at least some Android users (that is something I do not have to say when discussing security updates to iOS devices).
Disrupted Botnet
A malware botnet that has come already installed on some low cost Android devices such as set-top boxes, smartphones, tablets etc., and infected other devices through rogue apps has been disrupted by Google. A number of malicious apps that included the the BadBox malware have been removed from the the Play store and by sinkholing the communications from infected devices. It has been estimated the BadBox had infected over 500,000 devices.
BadBox malware disrupted on 500K infected Android devices
Only for the latest Google Pixel phones
Google has announced increasing the rollout of its AI powered scam detection for Google Pixel phones. This protection also extends to calls and texts.
Google expands Android AI scam detection to more Pixel devices
Pixel Phones versions 6 to 8 get a less powerful and less capable version.
How many of the people in your team use their own Android phones to process your information?
Do you need help understanding the issues the use of personal devices for raises, have a look at this:
A zero-day exploited by a government! Surely not.
The Serbian government did.
Google fixes Android zero-day exploited by Serbian authorities
The door on this exploit and others was patched in the March 2025, Android update – but again unless you and your team are using the latest Google Pixel Android phones, you will need to check when your vendor will post the security patches.
So overall a good week for some Android users.
Clive Catton MSc (Cyber Security) – by-line and other articles
