Is your smartphone at risk from Android malware?

The recent revelation in Wired News of a new Android malware application highlights the risk that comes with getting your applications from unknown sources. However, that same ability to get mobile applications from some place besides the Android Market is one of the things that users really like about Android devices. Besides that, the Android Market itself isnt exactly devoid of malware issues, and while Google gets rid of malware-laden applications when it discovers them in the store, sometimes they can stick around for a while.

But its important to know that Android devices arent alone in their vulnerability, which in turn means that users and the companies they work for need to be aware of the threat. Unfortunately, the answer isnt totally clear. While youll solve most of the problem by sticking with the application store that comes with your device, that clearly isnt a solution to everything. Worse, not all Android devices have full access to the Android Market, which means that users have to go elsewhere for the applications they want.

Things are a little simpler with Apple, Research In Motion and Microsoft. Apple has its application store locked down, and iOS users cant just go elsewhere to get an application. Its similar with RIM, although its possible for third parties to develop applications (including malware) that arent delivered through RIMs market. Microsoft Windows Phone 7 is so new that the whole application-store ecosystem isnt really fully developed. However, if the WP7 practice follows past practice, you wont be limited to just Microsofts application store.

Despite the protectionreal or imaginedprovided by the various application stores, there is malware for every platform, including the iPhone and its brethren. Fortunately, there is also anti-malware software for every platform, including the iPhone. While the level of threat varies and the method of delivery can differ between devices, the threat remains.

While its probably a good idea to install some kind of security software on your mobile device, its also a good idea to practice the same safe-computing practices that you practice with your computer. This means you should never open email attachments if you dont already know what they are. It also means that you should be careful about those Websites you visit using your mobile device.

And, of course, you need to be aware that unexpected or unusual behaviors by your device could be more than just misbehaving software. If something strange seems to be going on with your device, then consider the possibility that you might have a malware infestation. It also means that your personal information that may reside on your smartphone or tablet could be sent to someone with less than the best intentions.

Once youve discovered that you have (or might have) a problem with malware, you should try to remove it as quickly as possible, but even that might be too late to prevent some loss of data. Still, call the manufacturers support line, and even if it costs money for the support, get help in removing it. Limiting the damage is good even if you cant prevent all the damage that the malware might cause.

In addition, you should be careful about what information you store on your smartphone. For example, dont store credit card numbers on your device for any reason. Ever. Most malware seems to be keyed to locating those and sending them along to the bad guys.

Likewise, limit your use of online banking on your smartphone. While the malware that shows up most often doesnt currently seem to include keylogging, theres nothing to prevent it.

And because much of the malware that seems to circulate in smartphones appears to focus on your address book, be careful what you keep in there. Sure, you need phone numbers and email addresses for the address book to be useful, but do you really want to send all of your friends information to someone you dont know?

Finally, if you can find a good encryption package that youre willing to use, then use it. Malware cant do much with encrypted data, and neither can someone who might find your phone if you lose it. Remember that malware isnt the only threat to your phones data, and it may not be the biggest threat; smartphones are lost all the time, and when that happens, your data is at risk.

But while loss has always been a risk for mobile devices, malware is the one thats emerging, and the one with which most people are ill-equipped to deal. Given that, its important that you practice the same safe-computing practices on your smart phone as you do on your computer. The bottom line is to be careful what you download, and be careful of the attachments you open.

Source: eWeek
Nike