Malware Threat To Smartphones Rising

If you have a smartphone, you may be more vulnerable to viruses and malware than you think. After all, these devices are connecting to the Internet all day long, with little or no protection.

Malware attacks directed at mobile devices rose 46 percent in 2010, according to McAfee, a security software maker, who predicts the threat will grow as millions of consumers begin using smartphones and tablet computers.

Phones using the Android operating system are among the fastest growing segment of smartphones, so it's no surprise that much of the new malware is targeting that segment of the market. This week, the security software firm Sophos noted that a variant of the Geinimi bug is attacking Android phones with abandon.

Poses as app

The Trojan horse, known as Hong TouTou and ADRD, poses in Chinese third-party stores as legitimate programs. When users download the apps, they are really loading the Trojan.

"The official Android Market, run by Google, does not appear to be carrying the malicious apps -- but if you go 'off-road' and choose to install software on your smartphone from elsewhere on the net, then you could be putting your device at risk," writes Graham Cluley, one of Sophos's security bloggers.

Cluley says Android users who steer clear of third-party apps probably have less to fear, but those who don't could be endangering data and, potentially finances if they use their phone for banking.

Emulates clicks

The bug doesn't just collect information about you. It can also emulate clicks on certain search results. A hacker whose malware gets downloaded on thousands of phones can earn hefty commissions by creating the impression that mobile phone users are visiting particular Websites.

Lookout Mobile Security, which first reported the new variant this week, said it has already delivered an over-the-air update for its Android users to protect them against known instances of HongTouTou.

How to stay safe:

• Only download apps from trusted sources, such as reputable app markets. Remember to look at the developer name, reviews and star ratings.
• Always check the permissions an app requests. Use common sense to ensure that the permissions an app requests match the features the app provides.
• Be alert for unusual behavior on your phone. This behavior could be a sign that your phone is infected. These behaviors may include unusual SMS or network activity.
• Download a mobile security app for your phone that scans every app you download to ensure it's safe. Lookout users automatically receive protection against this Trojan.
• As the number of malware exploits on smartphones increase, it is more important than ever to pay attention to what you're downloading, say the security experts at Lookout. Their advice? Stay alert and carefully review every app you