Android Malware Grew 472% Since July 2011

Tweet

One of the main dangers of an open app ecosystem is the likelihood of malware infiltrating the marketplace. Security experts report that Android malware has grown by an alarming rate of 472% since July this year.

Juniper Networks’ Global Threat Center cautions against trusting Android apps too much. The network and security experts say that the low barrier to entry for Android developers and apps, and the lack of an upfront review process, has resulted in massive growth in Android malware, even in the official Android Marketplace.

The Global Threat Center’s Malicious Mobile Threats report says that Android malware has grown by 472% just from July to November this year. Attackers have also become more sophisticated in the maclious software they write and distribute through Android app markets. Most of these are designed to gain root access to a device, and then deliver a payload that will do all sorts of things, such as call premium numbers, send texts to pay services, or steal user information.

Juniper cites iOS as being a more secure platform. But this is not because of security in iOS in itself, but rather because of the way Apple processes applications for inclusion in the App Store. Android Market lacks the code-signing and app review process that Apple requires. Google can remove apps and kill code remotely, as it has done previously. But this is often done after the fact, when the malware has already done damage.

Still, the iOS ecosystem might not be as secure as everyone wants to think. Recent efforts by iOS app developer and security professional Charlie Miller have proven that apps with backdoor access can get approved into the App Store. That has prompted Apple to revoke his developer account for a year, though, and is likely to be working to quickly fix the vulnerability. As long as Apple is stricter with the way they approve and monitor apps, iOS will be the safer platform, at least for the regular smartphone user who has a tendency to skim past an app’s description and ratings page before tapping the “install” button.