With the growth in mobile exploding, it is only natural for cybercriminals to move towards that device as a means for profit since it has such large numbers. And for us as consumers this means learning about these new ways hackers can trick or deceive us.

Part of the education process is understanding where and how all this malicious activity happens. Unlike PCs where infections typically happen through email (attachments or links) or from visiting an infected website, for mobile devices, malicious software (malware) is distributed primarily through infected apps.

In their Mobile Security: McAfee Consumer Trends Report, McAfee analyzed data from McAfee Mobile Security users on Android devices and found:

• 16% (or 1 in 6) of apps are infected with malware or contain links to risky URLs
• 40% of malware do more than one malicious activity (for instance it may not only send your mobile # and device ID to the hacker, but it may also open a “door” so the hacker can get future information from other apps)
• The #1 malicious activity the malicious apps did was send handset and personal information to the hacker
• Spyware represents about 1/3 of all malware families in our zoo and 23% of mobile spyware joins a botnet or opens a backdoor, increasing the risk of data loss or device abuse

What does this mean for you?

It means you better be careful with your mobile device and especially what apps you download and use. I don’t know about you, but my smartphone has become an extension of me and without it I’d be lost. And if all the data that was on my phone got into the wrong hands, I shudder to think of what could happen.

That’s why it’s critical that you are careful when using apps. Here’s some tips to stay safe:

• Watch where you download: Only download apps from reputable app stores
• Investigate the app: Researching it by reading reviews and checking its ratings
• Check the permissions: Make sure the app is only accessing data it really needs to function- studies have shown that 1/3 of apps ask for more permission than they need¹
• Don’t store your logins: Do not choose the “remember me” option for apps and mobile browser for your login information, even though this is not as easy. This way, if a stranger accesses your device they cannot log into your accounts as you.
• Use security software: Software such as McAfee^® Mobile Security can also help protect your phone against malware, bad apps and other mobile threats. It also allows you to remotely locate, track and lock your device in the case of loss or theft.

Even though 51% of us would rather lose our wallet than our smartphone,² only 4% use mobile security software.³  It’s time….save yourself the hassle later and make security a priority for your mobile device and yourself.

Robert Siciliano is an Online Security Expert to McAfee. He is the author of 99 Things You Wish You Knew Before Your Mobile was Hacked!  Disclosures.

¹ http://www.cs.berkeley.edu/~afelt/android_permissions.pdf
²  Cisco 2011 Connected World Technology Report
³ http://juniperresearch.com/viewpressrelease.php?pr=255

Back in March of this year I posted a blog entitled The Google Kill Switch and Smartphone tips. At the time there were 21 apps on Google Marketplace that were infected with Malware that Google yanked from the market faster than I could blog the warning call.

McAfee has seen mobile apps designed to steal information from smartphones, apps that send out expensive text messages without a user’s consent and last year 4.6 million Android smartphone users downloaded a suspicious wallpaper app that collected and transmitted user data to a site in China.

These dangerous apps are usually offered for free, and masquerade as fun applications, such as games. Here are a few tips to keep your phone from spoiling your jolly holiday!

1. Read reviews of the app before you download. People are very vocal with criticism; here is where it comes in handy! This is where you will find out if the app doesn’t work on your particular phone, doesn’t do what it promises, or if it is great and users love it.

2. Read the permissions before you download. Is it requesting permission to access your call history, send sms texts or track gps location? If it shouldn’t need that information to work (such as ringtones or wallpaper) – Think twice before you install.

3. Download only from a trusted source.  Stick to apps from well known developers with good reviews.

4. Take advantage of additional security software. Use McAfee Mobile Security or if you have McAfee All-Access, your phone is already covered!

Stay safe out there!

Tracy