Mobile Security: Fake Security Updates for Android
- According to Symantec a malware currently imitates Google’s security updates for Android and sends SMSs to a C&C. The malicious application, called “Android Market Security Tool”, appears to be a repackaged version of the legitimate security application called alike.
- Android grew significantly these past months (almost 40% market share) which easily explains why it is now considered as a prime target for fraudsters.
- Considering the increasing number of threats designed to affect mobile terminals, the elaboration of dedicated security policies appears necessary. In fact, fraudsters now use these mobile platforms to make profit by selling malicious software and naturally target the most popular OSs most likely to generate financial gain.
- Once again, users’ education, notably, lies at the heart of the defence strategy. Also, companies proposing these devices to their employees must make sure they are protected with a strong password (source: Search Security).
- The Association of Independent Research Centres surveyed 1,600 smartphone owners in Great Britain, France, in Italy and in Spain, for Kaspersky Lab. This initiative reveals that one third store sensitive data on their smartphones (identifiers, webmail passwords, but also their PIN code). In the UK, only 47% of these users must enter a password to unlock their mobile phone.
- One third of the respondents use their mobile device to access online banking services (38% in France). Nevertheless, very few (27%) are actually aware they run a risk of getting infected and 52% do not know that dedicates antivirus are available.