Re:A new Android malware from Google
by microtonal on Friday July 03, 2026 @08:02AM
(#48773999)
If you use microg, it still contacts the Google servers even though it is an open source reverse-engineered implementation of Play Services.
Even worse, last time I checked the source code, it downloads Google's proprietary, obfuscated DroidGuard blobs (which they can change between requests) and execute it in the privileged microG process if an app does a Play Integrity request.
Even worse, last time I checked the source code, it downloads Google's proprietary, obfuscated DroidGuard blobs (which they can change between requests) and execute it in the privileged microG process if an app does a Play Integrity request.