What is the difference between the ANDROID/MALWARE/URL list and the ANDROID/POTENTIALLY_HARMFUL_APPLICATION/URL list?

[shu...@amazon.com]

The test malware URL on http://testsafebrowsing.appspot.com (including that URL in this post causes the post to get auto deleted) does not appear in the ANDROID/MALWARE/URL list, but does in the ANDROID/POTENTIALLY_HARMFUL_APPLICATION/URL list. I also notice that ANDROID/MALWARE/URL is not listed as an available list by the API when queried using threatLists.list method. Also, SafetyNet in Google Play services seems to be using the ANDROID/POTENTIALLY_HARMFUL_APPLICATION/URL list.

What is the difference between these two lists? Are there any reasons to prefer using one over the other? Why does the ANDROID/MALWARE/URL list not include that test malware URL?

[Pulsar9]

Please stop sending me these emails!!!!!

On Mon, Jan 7, 2019 at 3:27 PM shubag via Google Safe Browsing API <google-safe-...@googlegroups.com> wrote:

The test malware URL on http://testsafebrowsing.appspot.com (including that URL in this post causes the post to get auto deleted) does not appear in the ANDROID/MALWARE/URL list, but does in the ANDROID/POTENTIALLY_HARMFUL_APPLICATION/URL list. I also notice that ANDROID/MALWARE/URL is not listed as an available list by the API when queried using threatLists.list method. Also, SafetyNet in Google Play services seems to be using the ANDROID/POTENTIALLY_HARMFUL_APPLICATION/URL list.

What is the difference between these two lists? Are there any reasons to prefer using one over the other? Why does the ANDROID/MALWARE/URL list not include that test malware URL?

--
You received this message because you are subscribed to the Google Groups "Google Safe Browsing API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-safe-browsi...@googlegroups.com.
To post to this group, send email to google-safe-...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-safe-browsing-api.
For more options, visit https://groups.google.com/d/optout.

[Alex Wozniak]

Thanks for your question. The ANDROID/MALWARE/URL list is current unsupported, as indicated by the absence from the threatLists.list method. The POTENTIALLY_HARMFUL_APPLICATION/ANDROID/URL list contains host-suffix/path-prefix URL expressions that are known to distribute potentially harmful mobile applications. Check out this page for more information about potentially harmful applications on Android: https://support.google.com/android/answer/2812853?hl=en