Google Launches Android Spyware Forensics Tool for High-Risk Users

https://www.infosecurity-magazine.com/news/google-launches-android-spyware/

Publish Date: 2026-05-20 02:40:31

Source Domain: www.infosecurity-magazine.com

Google introduces new feature to combat spyware attacks on Android devices

Google is rolling out a new feature, Android Intrusion Logging, as part of its Android Advanced Protection Mode (AAPM). Designed to enhance the security of high-risk users’ Android devices against scams, fraud, and targeted attacks, this mode combines pre-determined security features including Intrusion Logging. Developed in partnership with civil society organizations like Amnesty International, this tool allows users to log their device and network activities when they suspect suspicious behavior or malware infection. These logs are encrypted and stored securely within the user’s Google account, then only decrypted by the user themselves. For forensic investigations, users can securely share these logs with trusted security experts. Alongside this, Google has rolled out additional updates including USB Protection to block new USB connections when the screen is locked, restricted accessibility services, disabled device-to-device unlocking, removed Chrome WebGPU support, scam detection in chat notifications, and expanded support to managed devices through Android Enterprise.

Key Points:

Android Intrusion Logging helps high-risk users log activities to investigate potential spyware attacks.
Developed with civil society organizations to provide forensic investigation tools.
Logs are encrypted and stored within users’ Google accounts.
Aimed to enhance security in Google’s Advanced Protection Mode, also known as AAPM.
Multiple updates have been added to AAPM to enhance device security further.