In a test of 250 Android antivirus apps in the Google Play Store, only 80 could detect more than 30% of malware, and only 23 had 100% detection rate
Only 23 Android antivirus apps had a 100 percent detection rate with no false positives. — An organization specialized …
Context & Ripple Effects
Google's own reporting has long framed Android as safe by default: the company says it scans 6B+ installed apps per day and credits machine learning for most detections in its Play Protect year-in-review. This test cuts against that framing from the other direction — auditing the third-party antivirus apps sold inside the Play Store itself.
The finding lands on a malware landscape that keeps growing: G Data counted 350 new Android malware instances per hour, increasingly concentrated in hidden apps that abuse accessibility features rather than obvious payloads. A market of 250 scanners where most miss the majority of threats is a gap between supply and actual protection.
First-order effects
- Users who installed one of the 227 apps below the 30% threshold paid for — and trusted — protection that mostly wasn't there, while the 23 full-detection apps become the de facto shortlist.
Second-order effects
- Google faces pressure to quality-gate the security category in its own store, since weak scanners undermine the Play Protect pipeline it advertises — a tension its built-in tool later failed to resolve when researchers found Play Protect identified only 68.8% of malicious apps, ranking last of 15.
Third-order effects
- If most third-party scanners can't keep pace with evasion tactics like accessibility-abusing hidden apps, Android security consolidates around platform-level defenses and a handful of credible vendors, shrinking the standalone antivirus market to the apps that pass independent tests.
The trend: Android malware defense is consolidating toward platform-built detection and a small set of independently validated vendors, as the long tail of ineffective store-sold antivirus loses credibility.