EXPLORINEER
en

Archive — US — techcrunch

Google launches new Android security feature to help uncover spyware attacks

Google introduces 'Intrusion Logging', a new opt-in Android feature that enhances security by helping researchers detect spyware attacks. It is part of the Advanced Protection Mode aimed at high-risk users and allows encrypted logging of security events, potentially improving transparency in responses to government surveillance and forensic tools.

Key points

  • Google launches Intrusion Logging as an opt-in feature for Android to assist security researchers.
  • The feature is part of the Advanced Protection Mode aimed at those at risk of spyware and forensic device attacks.
  • Intrusion Logging allows daily logs of security-related events to be collected and stored encrypted in the user's Google account.
  • Amnesty International collaborated with Google, highlighting the shift in forensic analysis capabilities for Android.
  • Existing logs for forensic analysis were not effective, often overwritten, limiting the detection of attacks.
  • The feature captures key events like device unlocks, app installations, and potential unauthorized access, supporting spyware investigations.
  • Intrusion Logging currently requires the latest Android version, is available for Google Pixel devices, and must link to a Google account.

Why it matters

  • This feature aligns with growing concerns over digital privacy and government surveillance, becoming increasingly relevant in a landscape marked by heightened cybersecurity threats.
  • Historically, both iOS and Android have faced spyware issues, with tools like Cellebrite revealing vulnerabilities, thus the introduction of such protective measures reflects a necessary evolution in mobile security.
  • Intrusion Logging mirrors Apple's Lockdown Mode, emphasizing parallels in technology responses to threats faced by activists and journalists.

Google's Intrusion Logging represents a significant advancement in Android security, aiming to protect at-risk users from spyware while improving forensic capabilities. This move, prompted by rising surveillance threats, reflects a broader urgency in the tech industry to enhance privacy protections amidst increasing cyberattacks.