“Android Developer Verifier” ADV malware

elgos

Hi,

I've just read this blog at F-Droid: What We Talk About When We Talk About Malware.

If you are running Android 8 or higher, a virus has been installed on your device and is silently awaiting remote activation. Over the past few months, devices around the world have been infected with this novel strain, with as many as 4 billion Android handsets and tablets estimated to have already been contaminated, meaning that around half of all humanity may be at risk from this threat.

That's the first time I heard about.
Where can I read more?
Is GrapheneOS concerned?

Thanks

NoahRaketic

They can't get people to care about what's happening through facts, so instead they try to paint a system service as "malware" with "root" privileges, which isn't how system apps work. It's not malware or a virus in any sense of the word.

The authors of Keep Android Open are clearly getting desperate for people's attention.

elgos This is a requirement only for certified Android OSes, so it won't affect GrapheneOS. On Android, you'll still be able to enable sideloading from unverified developers even after September. https://android-developers.googleblog.com/2026/03/android-developer-verification.html

de0u

elgos It's not a virus. It's not a trojan horse. It isn't malware. And it won't be part of GrapheneOS.

It will probably be a one-time annoyance for users of Google-certified Android releases who want to install apps from F-Droid (or from developer sites via Obtanium). It may or may not cut down on naive users being tricked into installing malware.

elgos

Many thanks @NoahRaketic and @de0u for your explanation. This misnomer bothered me...

Fay_Wilmont

elgos Where can I read more?

Try this article, and all the links it contains:
What We Talk About When We Talk About Malware

🤦‍♂️