Android Phones Seeing 'Malware Epidemic'

Mobile phones running on Google's Android operating system are experiencing a "malware epidemic," with the amount of malicious software having risen nearly fivefold since July, according to a post by the security research division of Juniper Networks.

More than half of the smartphones sold worldwide in the third quarter of the year use Android software, the research firm Gartner said this week. And as the platform grows, so do its malware woes. Cybersecurity firm McAfee reported in August that Android had become the number-one target for malicious software.

October and November are expected to see the fastest growth of malware in the history of the Android operating system, according to the post by Juniper Global Threat Center. This comes after a fourfold increase in Android malware from 2009 to the summer of 2010, the company said. By Juniper's count, that means Android malware has increased a stunning 427% from July 2011 to November 10, 2011.

Juniper said hackers have become more sophisticated in the malware they create for Android, writing malicious code that allows them to take control of the phone, spy on victims and send premium-rate text messages - which can cost $2 to $3 each - from a victim’s phone to the hacker, who collects the money.

Juniper said malware on Android devices has become widespread because Google’s method for policing its mobile app store is less stringent than Apple’s system for keeping malware out of its mobile app store.

"There is still no upfront review process in the official Android Market that offers even the hint of a challenge to malware writers that their investment in coding malware will be for naught," the report said.

Malicious applications in the Android market can be removed after the fact if someone discovers it and reports it, Juniper said.

"But how many unsuspecting people are going to download it before it is identified as malicious and removed?" the post said. "This is precisely what is playing out in the mind of mobile malware developers today."

A recent report by the malware testers at AV-Test.org found that most free Android malware scanners did a poor job of detecting malicious software. "[T]he circulation of obviously near to useless security apps endangers those, who trust them and install apps from 3rd party app markets without further suspiciousness," read AV-Test's report, according to ZDNET.

Malware-Free Android Smartphone

Since more and more malware is emerging for the Android platform every day, you must pay strict attention to what is happening on your phone or tablet. Smartphones are essentially computers--and all computers are vulnerable to viruses, phishing, and other attacks from malicious software.


Here are five quick tips to help you keep your Android phone or tablet free of malware.

Always research the publisher of an app: What other apps does it offer? Does the publisher have its own website? Do any of the other apps look a bit shady? If so, you should probably stay away. Read online reviews, but remember that Android Market reviews may not always be truthful. Check around to see what reputable websites such as PCWorld, AppBrain, or AppLib are saying about the app before you press the download button.

Always check app permissions: Whenever you download or update an app, you see a list of permissions for it. An alarm clock app, for instance, probably shouldn't need to look through your contacts. The general rule of thumb: If an app is asking for more than what it needs to do its job, you should skip it.

Avoid directly installing Android Package files (APKs): When Angry Birds first came to Android, you could get it only by going through a third-party app store and "sideloading" it, installing the app by using an APK file. Although Angry Birds wasn't malware, in general it is highly advisable not to download and install APK files from third-party websites or app stores. Most of the time you won't know what the file contains until you install the file--and by then it's too late.
Put a malware and antivirus scanner on your phone: Several different big-name security companies already offer mobile-security options, many of them free. Antivirus apps such as Lookout Mobile Security can scan your phone and make sure that no malware is installed. On top of that, most of the utilities include features that allow you to track your phone--and perhaps even remotely lock it and wipe your personal data--if you lose the handset.

Watch out for scams: Believe it or not, your smartphone is prone to phishing scams, malicious sites, and drive-by downloads, just as your PC is. Malicious sites often try to trick people into entering personal information about themselves; even more annoying, however, is some sites' ability to automatically download malware to your phone. Because of a phone's smaller screen, users are three times more likely to click a suspicious link on a phone than when they are using a PC. Again, though, Lookout Mobile Security has your back: Its Safe Browsing feature is currently available in the Premium version of its app.
If you follow these steps and keep a watchful eye on your device, you should be able to enjoy your phone malware-free.