Yes, some Android apps can be malicious — Apple, Microsoft, and the
media seem happy to remind us about this. Take a few basic precautions
and you can avoid these potentially dangerous apps.
Google doesn’t manually approve apps like Apple does, but they do
scan apps in the Google Play Store for malware. Permissions, reviews,
and other reputation information can also tell us a lot.
It’s Not In the Play Store
Android allows you to install apps from outside the Google Play Store thanks to side loading.
This extra freedom allows for more choice — like the ability to install
apps from the Amazon App Store, if you prefer — but it also opens up
extra risks. Just like on Windows, Mac OS X, or Linux, you can get
software from anywhere on the web and install it. And, also like on
desktop operating systems, people can write malicious apps and
distribute them via the web.
As we mentioned in our overview of whether Android antivirus apps are worth using,
most malicious Android apps come from outside the Google Play Store. If
you download a pirated app from a shady website, you shouldn’t be
surprised if it brings malware onto your system.