Android & iOS Malware

How many of you own smartphones or tablets running Android or iOS? As many believe that we are moving into the post PC world are viruses following the rest of technology over to mobile devices? Apple and Google have taken very different approaches to combating malware on their systems. Apple uses what some call a “walled garden” approach. They only allow certain apps through to get to their app store, testing each one for suitability. So far it has proven to be quite effective with less than 1% of malware on mobile devices is one iOS devices.

Android, meanwhile accounts for more three quarters of mobile malware. Why is this? A few reasons researchers have cited:

1. Android enjoys the highest market share for mobile devices.
2. Android is fragmented with some users on older devices not able to upgrade to the latest and greatest version, missing out on the latest security protections.
3. Google does not subject apps in the Google Play Store to the same scrutiny Apple does with their counterpart. Google allows apps into their store removing them if they have problems whereas Apple checks apps before getting uploaded, making sure they pass certain requirements.

The three most common types of malware affecting Android according to the Dept. of Homeland Security:

1. SMS Trojans- these will send text messages to a certain number which charges the user for the service.
2. Rootkits- Logs keystrokes, passwords, and locations without the users consent
3. Fake Google Play websites- The vast majority of malware in the google play store is weeded out by Google, however downloading apps from outside the Google Play store can present unnecessary risk.

What can you do to prevent malware on your mobile device?

1. Update you device. Unfortunately, many users are using outdated versions of Android many being unable to upgrade. Some people are eligible for a free upgrade to a new smartphone with a later version of Android. Apple has been able to update the vast majority of their users to the latest version of iOS. Google cannot do this as they do not manufacture the hardware.
2. Install a protection program
3. Avoid free Wi-Fi Hotspots, especially those that are not secured.

Its not all bad for Android though. Many of these problems with Android are being worked on by Google and in the future we may have a much more secure mobile operating system. Here is a graphic showing the different layers which malware must pass through. Note that some of the layers can be bypassed through users options.



How many of you use Antivirus on your mobile device? Who has gotten malware on their mobile device?
References:
http://qz.com/131436/contrary-to-what-youve-heard-android-is-almost-impenetrable-to-malware/
http://info.publicintelligence.net/DHS-FBI-AndroidThreats.pdf