> Has anyone ever got any app flagged by PlayProtect?

I know it famously flags the Apptoide app store (a Google Play rival) as malware[1]

[1]: https://techcrunch.com/2019/06/04/aptoide-a-play-store-rival...

I just took a look at Apptoide, why does everything have some sort of coin associated with it. Does anybody else just close the tab as soon as they see any mention of Bitcoin etc?

Play Protect is not a malware scanner, it's a green check mark designed to lead people to believe they are protected.

https://www.av-test.org/en/antivirus/mobile-devices/

Do you have one of the affected versions installed? The versions since July 30th are not affected (according to https://news.ycombinator.com/item?id=20826213).

I have auto-update turned on, yet I just discovered CamScanner was apparently stuck on an unsafe version from July. Now CamScanner seems to be removed from the play store, yet I had to remove the app manually. Play Protect still thought everything was fine. I have a Google Pixel running stock firmware. I guess it's time for a factory reset.

I had paid version installed with auto update and I didn't receive any warning via PlayProtect.

Kaspersky blog mentioned that the malware was part of the advertising module; so I assumed it gets activated only on the free version, so I manually scanned using PlayProtect in a mobile with free CamScanner installed.

Since both of the instances I've mentioned has auto update, it's likely they were >July 30. But Kaspersky did mention that the latest version was indeed affected.

I did, and no, PlayProtect did nothing.

I certainly flags PhoneGap Build apps without a signing certificate. So at least you know that the malicious parties have paid some money to get a cert!

According to https://www.androidpolice.com/2019/08/28/camscanner-play-sto..., if you have an update within the last month, you have a safe version of the app, so it should not be flagged.

> Has anyone ever got any app flagged by PlayProtect?

Yes, it started flagging all the apps my company distributes internally for testing purposes. Getting it to stop seemed impractical, so my company's guidance is now to disable Play Protect on any test device.

Is it certificate issue? Or a phonegap build like another user has said.

Not PhoneGap. Been a while since I investigated it and don't have more time to waste on it. shrug