Mobile Malware: Are You Exposed?

Do You Need Anti-Malware Protection for Your Smartphone?

Malware targeting mobile operating systems is on the rise. Security firm McAfee Labs says its count of mobile malware programs has risen from about 600 in 2009 to 1,200 in 2011. Mobile malware is just as sophisticated as its desktop brethren, too. "Mobile threats already take advantage of exploits, employ botnet functionality, and even use rootkit features for stealth and permanence," according to McAfee's most recent threat report.

Google Android was the target of 76 per cent of new mobile malware apps detected in the second quarter of 2011 (44 new malware apps, in raw numbers). Clearly, the fastest growing mobile operating system is also the fastest growing target for mobile malware authors. Java Micro Edition placed second with 14 new malware apps. Symbian was third, followed by Blackberry.

Notably, no iPhone or iPad malware has been detected yet. McAfee says, "It is probably a matter of 'when' rather than 'if.'" But the fact that Apple closely vets and controls the apps that make it into the Apple App Store undoubtedly makes it difficult for malware authors to sneak their wares in. Google's App Market, in contrast, does not pre-screen apps before they become available to users.

Who Benefits From Mobile Malware?

Mobile malware aims to make money, of course. One straightforward scheme is malware that secretly subscribes the infected device to premium SMS services; every text message sent or received costs the user money. This type of malware may be concealed in another app such as a calendar or game. Each time you add an appointment or kill a robot, a text message is added to your monthly bill. Other forms of mobile malware may log passwords, steal financial data, and so on.

As you might expect from the foregoing, there's a booming market for Android anti-malware solutions.

Lookout Mobile Security offers one called the Mobile Threat Network. App stores and download sites submit their apps to Lookout, which scans and tests them for suspicious behavior. When an app is identified as probable malware, all of the participating stores are notified and the app is pulled. Lookout also offers a free anti-malware app through the Android App Market.

All of the major security vendors are rolling out mobile anti-malware apps. Norton, McAfee, AVG, and Kaspersky are just a few well-known names. As mobile computing grows, so will mobile malware and mobile anti-malware.

But Do You Really Need It?

So do you need mobile anti-malware protection? If you have an iPhone, I'd say definitely not. One caveat to that would be "jailbroken" iPhones. If you hack your phone in order to enable downloading apps from sources outside of Apple's App Store, then all bets are off.

But what about those with Android or Blackberry phones? To the best of my knowledge, there are no mobile threats similar to the "drive-by viruses" that affect desktop users. So if your smartphone activity is centered on web browsing, and not apps, I don't see a risk that warrants anti-malware protection.

Well-known apps such as Facebook, Gmail, Yelp, Angry Birds, Kindle, Weather Channel and others with good reputations are safe to use. And I have not heard any reports about malware in any paid apps. Check for reviews before you download an app. But if you are the type who can't resist the latest game or productivity tool, then I'd say you run a significant risk.

To summarize, the danger zone for mobile users right now is free apps with unknown or sketchy reputations. Stay away from those and you should be safe. For now.

Your thoughts on this topic are welcome! Post your comment or question below...