400 Percent Increase In Android Malware

[Firefox]

400 Percent Increase In Android Malware; Mobile Security Threats At Record High

by Jordan Crook on May 10, 2011

Juniper Networks today released a study concerned with potential threats to mobile technology, revealing a 400 percent increase in Android malware. The study also found that both enterprise and consumer mobile devices are being exposed to a record number of security threats, including highly targeted Wi-Fi attacks.

One of the most unsettling findings of the study was the fact that the greatest distribution point for mobile malware is the application download. With the 400-percent increase of Android malware, now would be as good a time as any to choose an antivirus app. Still, the vast majority of mobile users neglect to employ any form of antivirus software on their mobile devices. And Android isn

[Firefox]

Related Story....

Malware writers gunning for Google Android

Symbian and Microsoft Windows Mobile platforms have been the proving ground for mobile malware over the past five years, but a new Juniper Networks report states that Google Android now takes "the crown" as the platform getting the most attention from malware developers.

"That's where the momentum is for 2011," says Dan Hoffman, chief mobile security evangelist at Juniper, whose "Mobile Devices: The New Frontier for Malicious Exploits" report examines the deterioration in mobile security. Juniper urges enterprises to adopt the same security controls for smartphones as they would for laptops.

TIPS: How to turn Android into a business phone

"Consumers can expect to see more advanced malware attacks against the Android platform," according to the report. These attacks include "command and control zombies and botnet participators, devices that are remotely controlled to execute malicious attacks."

RIM BlackBerry devices and Apple iPhones get off relatively unscathed, though spyware applications like FlexiSpy, Mobile Spy and MobiStealth are all seen as threats, according to the report.

As for Android, in January 2010 the first bank phishing application appeared in the Android Market. Another Android-related incident came about in which "mobile service provider Vodafone was unknowingly shipping devices from its mobile handset manufacturer with Secure Digital (SD) cards pre-loaded with the Marisposa botnet that affected Windows systems. When a user unpacked their new device and connected it via USB cable to their Windows-based PC -- to transfer files or synchronize the device -- the SD card's autorun function would initiate and infect the user's computer with the botnet."

The Juniper report recaps other mobile malware shockers, such as the Android Market's DroidDream infiltration earlier this year and other problems from last year when applications capable of malicious activity were identified that had found their way into the Android Market.

In contrast, "the Apple iPhone suffers from relatively little known malware, although applications exist to obtain user data and clandestinely transmit this information outside of the device," according to the Juniper report, which points to research done at the Technical University of Vienna and the University of California, Santa Barbara, that analyzed 1,400 iPhone and iPad applications.

The results of that study showed "nearly half of the analyzed applications leaked various forms of sensitive data to third parties. In most cases, application developers used pre-packaged code purchased from advertising agencies, originally intended to collect device information that could be used to build advertising profiles of the device user."

The report also draws from the general experiences last year of Juniper's own customer base using the Junos Pulse Mobile Security Suite software on smartphones. "Spyware capable of monitoring any and all forms of communication to and from a mobile device accounted for 61% of all reported Juniper mobile customer infections," the report states. For those using Android, it was 100% of all reported infections.

Juniper also notes that it found one-third of registered software users lost their device at some point and were forced to use the Junos Pulse software "locate device" capability, with 77% of these users then deciding to send a command to lock the device to stop someone using it. About a third never issued an unlock command, which brings Juniper to believe these devices were never found.

[ILikeTrains]

As a proud Android user myself, I've found that Lookout Mobile Secirty is the best choice for an AV app. Its alarming how many "Anti-virus" apps on the Market just look at how many permissions an app has, and if it has too many, it labels it as a virus.

Here's a link to the Market page for Lookout if your interested: https://market.android.com/details?id=com.lookout&hl=en

[Firefox]

Thanks for posting that ILikeTrains... I already have that installed and running on my devices...

[ThexDarksider]

I believe I got my data stolen by a trojan once, when I had just first gotten my Android, as I ran a program that required more permissions than it should have, but it's not like I work for NASA or something, haha. Anyways I learned since then and removed everything that I don't use and checked all permissions, and that's probably the best way not to get a virus: don't randomly click on things in the Market. I refuse to use an antivirus except for my brain.