Hacker News Reader

Comment by abc-xyz | Hacker News Reader

Android also have a lot of malware issues. I’ve had to help factory reset Android phones quite a few times because friends and family ended up getting spammed with sex notifications and had their search engine hijacked. Windows and OSX suffers from the same problems. The reason these platforms suffer from malware, while iOS does not, is because they allow third-party installations.

View on HN

From what I've seen, the majority of Android malware either comes from Google's Play Store, or gets included on the phones by certain OEMs. F-droid in particular, due to its open source requirement, hasn't ended up hosting any malware so far.

F-Droid is even more locked down than the App Store, and even if they turned it into the default app store then Android would still be riddled with malware.

As to how the Android users keep acquiring malware, I have no idea whether it’s from the Play Store, or if they download free apk files of paid apps, or if they download it through ads or from emails or whatever. I just know I have to help fix them regularly, and if iOS is forced to open up then iPhones will suffer from the same malware issues that you see with OSX/Windows/Android.

This is incorrect. Google's own statistics (https://source.android.com/security/reports/Google_Android_S...) indicate that devices that use side-loading have an 8x relative higher incidence of malware compared to devices that only install apps from the Google Play Store.

(Note: I believe Google's absolute numbers are significantly underestimated due to the poor performance of Google Play Protect compared to other malware detection tools, but so far they are the only source I have found that publishes relative numbers between the Play Store vs side-loading.)

As some high profile examples:

- HummingBad infected 85 million devices primarily via direct-download on malicious adult websites. (https://www.zdnet.com/article/this-android-malware-has-infec...)

- Agent Smith infected 25 million devices primarily via a third-party app store. (https://www.theverge.com/2019/7/10/20688885/agent-smith-andr...)

Reply on news.ycombinator.com