The top five Android threats

SECURITY

|
Image: By BiztechAfrica
The top five Android threats

Sophos has revealed the extent of malware targeting Android mobile phones, by analysing detection statistics from its Sophos Mobile Security app.  This data was taken from installations of the application on Android smartphones and tablets in 118 different countries around the world.

SophosLabs' research revealed the top five most commonly detected malware on Android are:

1. Andr/PJApps-C - 63.4%

2. Andr/BBridge-A - 8.8%

3. Andr/Generic-S - 6.1%

4. Andr/BatteryD-A - 4.0%

5. Andr/DrSheep-A - 2.6%

Others - 15.1%

1. Andr/PJApps-C.  When Sophos Mobile Security for Android detects an app as Andr/PJApps-C it means that it has identified an app that has been cracked using a publicly available tool. Most commonly these are paid for apps that have been hacked. They are not necessarily always malicious, but are very likely to be illegal.

2. Andr/BBridge-A.  Also known as BaseBridge, this malware uses a privilege escalation exploit to elevate its privileges and install additional malicious apps onto Android devices. It uses HTTP to communicate with a central server and leaks potentially identifiable information.  These malicious apps can send and read SMS messages, potentially costing the mobile owner money. In fact, it can even scan incoming SMS messages and automatically remove warnings that you are being charged a fee for using premium rate services it has signed the user up for.

3. Andr/Generic-S.  Sophos Mobile Security generically detects a variety of families of malicious apps as Andr/Generic-S. These range from privilege escalation exploits to aggressive adware such as variants of the Android Plankton malware.

4. Andr/BatteryD-A.  This "Battery Doctor" app falsely claims to save battery life on an Android device. But it actually sends potentially identifiable information to a server using HTTP, and aggressively displays adverts.

5. Andr/DrSheep-A.  This is an Android equivalent of the desktop tool Firesheep.  It can allow malicious hackers to hijack Twitter, Facebook and Linkedin sessions in a wireless network environment.

"The volume of malware that Sophos discovered highlights that mobile security is a real and growing problem, especially on Android," says Brett Myroff, CEO of Sophos distributor NetXactics. 

"Criminals are creating more and more targeted malware for different platforms. Smartphone users need to realist that security is no longer limited to PCs; mobiles and tablets are also at risk if not sufficiently protected."

A new version of Sophos's free anti-virus for Android is available from: https://play.google.com/store/apps/details?id=com.sophos.smsec



Share the News

Get Daily Newsletter

comments powered by Disqus

MORE SECURITY NEWS

Kaspersky Lab: Emerging Threats in the APT World - Predictions for 2015

Kaspersky Lab experts have released a list of the top emerging threats in the APT world. Read More

“Visibility Void” represents potential threat to enterprises

Companies must stay on top of a growing pool of cyber-threats says Andrew Potgieter, security solutions director at Westcon.   Read More

The hackers’ bounty - how much do cybercriminals make from innocent users?

Cybercriminals could be raking in profits 20 times greater than the cost of their attacks, according to figures compiled by Kaspersky Lab experts.  Read More

Don’t get hacked this holiday

Public Wi-Fi isn’t as safe as you might think, warns Eset. Read More

Regin: a malicious platform capable of spying on GSM networks

Kaspersky Lab’s Global Research and Analysis Team has published its research on Regin – the first cyber-attack platform known to penetrate and monitor GSM networks in addition to other “standard” spying tasks.  Read More

Security a top priority as Africa moves to LTE

Securing the network is a top priority for telcos and carriers as LTE becomes increasingly mainstream across Africa, says Fortinet. Read More

Barclays ropes in ICT taskforce in anti-fraud war

Barclays Bank of Botswana (BBB) has roped in experts in the field of Information Technology and cybercrime to give weight to its annual fraud awareness month. Read More

Kaspersky Lab: Most businesses use third-party services to manage virtualisation

Less than one-third of businesses keep their virtualisation servers on-premises and managed entirely by their own internal IT staff, according to a Kaspersky Lab survey of 3,900 IT professionals worldwide.  Read More

Cisco: Employee complacency increases risk

Kian Ellens Research released by Cisco shows that critical company data is at risk in South Africa as a result of organisations focusing IT security policies and resources more on external threats and not enough on the threat from within.    Read More

Cyber security workshop set for Wednesday

The African Cyber Risk institute (ACRI) will host a cyber security conference in Gaborone on the 29th of October.  Read More

PRESS OFFICES

Sage ERP AfricaSAP AfricaSage Pastel AccountingTrust PayVMWareSamsung ElectronicsMitsumi DistributionPhoenix DistributionMTN BusinessSchneider ElectricMultichoice

FEATURED STORY

PWC: Optimism abounds but a bumpy journey ahead for somePWC: Optimism abounds but a bumpy journey ahead for some

PwC’s ‘Capital Projects & infrastructure in East Africa, Southern Africa and West Africa,’ report says infrastructure spend in the region is projected to reach $180bn per annum by 2025.

IN DEPTH

Africa lags on digital migration Africa lags on digital migration

Only three African countries have so far completed the digital migration process, and serious issues are hampering the migration in other nations.