Android's Getting More Malware

Symantec is reporting the increased spread of Android malware, with a new attack involving modified versions of legitimate apps, being hosted on unregulated third-party Android Marketplaces. Specifically mentioned is Android.Pjapps:

Android.Pjapps masquerades as a popular “Steamy Window” app. The legitimate features of the original app are still present in the malicious version, but it also features additional functionality that allows an attacker to build a botnet. Among other things it is able to install applications, navigate to websites, add bookmarks to the user’s browser, send text messages and block text message responses. It also sends sensitive user information back to the attacker. 
 
Looking at the threat capabilities, Symantec believes it has been designed and may be used to peddle ad campaigns and to obtain benefits from the use of third-party premium rate services at users’ expense.

Symantec has offered a list of common-sense tips to keep your Android device free of malware:

* Only use regulated Android marketplaces for downloading and installing Android apps.

* Adjust Android OS application settings to stop the installation of non-market apps

* Review other users’ comments on the marketplace to assist in determining if an app is safe.

* During the installation of Android apps, always check the access permissions being requested for installation; if they seem excessive for what the application is designed to do, it would be wise to not install the application.

* Utilize a mobile security solution on devices to ensure any downloaded apps are not malicious.

* Enterprises should consider implementing a mobile management solution to ensure all devices that connect to their networks are policy compliant and free of malware.

One of the strengths of the Android platform is the ability to offer up applications without needing to go through a central authority for permission, as Apple requires. This opens up the door for malicious coders to take advantage of trusting consumers, however, and is the price of such openness. 

[via Symantec]