Mobile Malware

It is important to recognize that a mobile device is a computer and, as such, applications or games can be malicious, and it’s always recommended to check the source. A good practical rule: if an application is asking for more than what’s necessary, you should not install it.

In general, Wi-Fi networks are insecure. For example, if a user is accessing corporate data using a free Wi-Fi connection at an airport, the data may be exposed to malicious users who exploit wireless traffic at the same access point. Companies should develop acceptable usage policies, provide VPN technology, and require users to connect via these secure means.

BYOD can be advantageous for users and businesses but may result in additional risk. Ask yourself: How can I control a device owned and managed by a user that requires access to my corporate network? Employees are often the best defence to combat the theft of confidential data. Employees using their own mobile devices must follow policies that keep the company in compliance with regulatory requirements.

That sounds easier than it really is. In the Android ecosystem, updates can be blocked in several ways: by Google (which updates the operating system); by the manufacturer of the device (who may decide to release updates only for the latest models); or by the mobile operator (which may not increase the bandwidth on your network to support updates). Without the ability to update the Android operating system, your device is vulnerable to possible exploits. Search mobile operators and manufacturers to find out which ones provide updates, and which don't.

The risk of losing a device is still greater than the risk of malware infection. Protecting your devices by fully encrypting them makes it very difficult for someone to hack into and steal the data. Setting a strong password for the device, as well as for the SIM card, is mandatory.

Popular shopping sites, such as Amazon or eBay, have their own mobile apps. If you want to use these apps, make sure they're the company's official apps before you start downloading. This can be done by checking developer information and user reviews on the download page. Do not install applications that are not in official stores.

Users can create a strong password on their smartphones. If a password attempt fails a certain number of times, the phone will be locked, disabled, and in some cases all data will be erased.

Text messages are an easy target for mobile malware, so it is advisable that users do not send sensitive data, such as credit card details or important private information by text.

The padlock icon in the browser’s address bar indicates that you are on a secure connection from an encryption standpoint. Check for the padlock when entering personal data, such as your address or payment information, or sending e-mails from your smartphone's browser.

Sometimes we give access to the camera, microphone, photos, or location, and other features to an application that temporarily needs that access, and we never remove it again. You can and should check regularly which applications have access and if you need to disable them and remove them. For example, instead of giving an app permanent access to your photos, you can choose to share that image from the photo manager for that app. This way, the app will only have access to photos that are shared with it. Location access can also be limited to only when the application is running, thereby reducing the risk of exposure.