Google could be expanding its Live Threat Detection feature, part of Google Play Protect, to more Android devices, according to Android Authority. The system uses on-device AI to identify harmful applications by analyzing their behavior and alerting users in real time for immediate action.
The feature functions by employing on-device artificial intelligence models to conduct behavioral analysis of applications. It specifically monitors how apps interact with sensitive permissions or engage with other applications and services in unauthorized ways. This scanning process operates within the Private Compute Core, a secure environment designed to perform analysis while preserving user privacy.
Live Threat Detection was first introduced on Google Pixel devices. The company plans for a broader rollout in the coming months to include hardware from several other manufacturers: OPPO, HONOR, Lenovo, OnePlus, Nothing, Transsion, and Sharp. An APK teardown of the Play Protect Service app revealed that the feature is receiving its own dedicated page, which will list apps identified as threats.
Initially, the system is focused on identifying specific types of malicious software. Its primary targets are stalkerware and other applications designed to collect personal data without obtaining user consent. The scope is planned for future expansion to cover additional categories of harmful apps, broadening its protective capabilities.
