Malicious apps can still bounce around Google play

To combat the growing number of malicious Android apps on Google play, Google unveiled a new service back on February 6th called ‘Bouncer’. Developers upload their apps, Bouncer will scan the code using dynamic* behaviour analysis for known malware, spyware and Trojans. Bouncer uses a type of reputation engine to flag Android apps that appear to be misbehaving, using previously scanned apps (this is the white/black list reputation database) to detect possible malicious activities. In addition, Bouncer also scans new developer accounts, to make sure misbehaving developers are banned from Google play. *Note: Bouncer doesn’t use static analysis – maybe it should, but we all know manually scanning code takes time and resource. Read more...