Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

onehandle

(51,122 posts)
Mon Oct 15, 2012, 04:53 PM Oct 2012

FBI warns that Android phones are havens for malware

Source: BGR/Fortune

A division of the Federal Bureau of Investigation has issued a warning to smartphone users about mobile malware and device safety, specifically regarding the Android operating system. A report published late last week the Internet Crime Complaint Center revealed that it has been made aware of various malware attacks, such as Loozfon and FinFisher, that target Android smartphones. Each malware is different and can range from stealing a user’s address book to completely taking over the infected device. The agency notes that Loozfon and FinFisher are just two examples of active malware that are used by criminals and users should take precautions to protecting their devices.

When purchasing a smartphones users should know the features of the device and use protective features such as device encryption and antivirus software to guard personal data. When downloading and purchasing apps, the FBI advises that users not only read reviews but also understand the permissions, such as Geo-location, they are granting the apps. Geo-location is used in applications to track a user’s location mostly for marketing purposes, but it can also be used for malicious purposes such as cyber stalker or burglaries.

The agency recommends that for physical security smartphone owners should consider locking their devices with a pass code and only connect to trusted Wi-Fi networks. Lastly, smartphones should always be kept up-to-date and users should avoid jailbreaking or rooting their devices to avoid greater security concerns.

All in all, users should be using the same precautions on their mobile phone as they do on their computers.

Read more: http://news.yahoo.com/fbi-warns-android-phones-havens-malware-181958059.html

62 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
FBI warns that Android phones are havens for malware (Original Post) onehandle Oct 2012 OP
BUT APPLE IS EVIL!! Indydem Oct 2012 #1
Free me from the walled garden! onehandle Oct 2012 #13
Freedom is an ugly thing Xithras Oct 2012 #54
I don't understand your comment Bradical79 Oct 2012 #28
I guess you don't read many tech blogs. Indydem Oct 2012 #29
Yeah, I'm aware of that. I take "evil" to mean something different on this forum than a tech site. Bradical79 Oct 2012 #33
This is not surprising. For years Windows PCs had many more problems with malware than Macs. KamaAina Oct 2012 #2
Android is Windows for the 21st Century. nt onehandle Oct 2012 #14
Hm... boppers Oct 2012 #25
Ruh roh. Panasonic Oct 2012 #3
He may have been talking about the Galaxy S II ... mwooldri Oct 2012 #22
Just protect it MuseRider Oct 2012 #37
Not sure you can protect Android unc70 Oct 2012 #43
what you can't protect are stupid end users frylock Oct 2012 #47
You can't protect smart end users either unc70 Oct 2012 #49
"Don't do stuff to your hardware if you don't understand it" is eminently reasonable advice. (nt) Posteritatis Oct 2012 #4
I suppose that to a fanboy sharp_stick Oct 2012 #5
Metamoderating aside, I'd figure FBI announcements count as news. (nt) Posteritatis Oct 2012 #9
That's how I read it. nt onehandle Oct 2012 #12
AVAST has a great AV for Android. And it's free. Blue State Bandit Oct 2012 #6
So you have to have an AV running in the background? Indydem Oct 2012 #18
i downloaded and installed it barbtries Oct 2012 #44
I believe it Lucy Fer Oct 2012 #7
Then how will they make money? They've lost 20 billion on Android. nt onehandle Oct 2012 #15
But yet the FredisDead Oct 2012 #8
Same factories. onehandle Oct 2012 #16
Google has lost 20 billion on Android FredisDead Oct 2012 #17
Google is apparently losing money on Android Art_from_Ark Oct 2012 #40
A number of analysts have estimated around 20 billion. onehandle Oct 2012 #46
"no Chinese workers are complaining to Google about the harsh working conditions" boppers Oct 2012 #26
I am aware of how the market works FredisDead Oct 2012 #42
Yup. Blaming Apple is not relevant. boppers Oct 2012 #55
Foxconn also does business with Google as of this year. Bradical79 Oct 2012 #34
Oh, please.... defacto7 Oct 2012 #10
Exactly! TM99 Oct 2012 #21
It's not the OS, it's the crap piled on it. boppers Oct 2012 #27
He who controls the crap owns the crap TM99 Oct 2012 #36
if you want to call it "making it harder to pile crap" defacto7 Oct 2012 #38
Not using predictable memory locations is not crap. That's hardware design. boppers Oct 2012 #56
no, I'm not talking about cmd.exe... it lower than that. defacto7 Oct 2012 #57
So, is it bash? Korn? Csh? Tcsh? boppers Oct 2012 #58
Warning? defacto7 Oct 2012 #59
You have nothing to show me? boppers Nov 2012 #62
intelligent end users make it harder to pile crap on it frylock Oct 2012 #48
FBI warns that stupid people are installing malware on their android devices.. frylock Oct 2012 #11
thanks... MrsBrady Oct 2012 #19
And morons are responsible for the bulk of this Hutzpa Oct 2012 #20
And if they're old enough ... GeorgeGist Oct 2012 #50
Android by its open nature is more suspect to malware. mwooldri Oct 2012 #23
Android IS Linux LTR Oct 2012 #32
Apple is Unix (Linux) or more exactly BSD UNIX. defacto7 Oct 2012 #35
Android and Linux share common code. mwooldri Oct 2012 #51
The FBI should know about spyware..... lib2DaBone Oct 2012 #24
Sometimes it's the apps themselves that you have to worry about LTR Oct 2012 #30
Yes, just use good common sense. MuseRider Oct 2012 #39
I am an Android user (who has used it to post on DU at times) alp227 Oct 2012 #31
i love my old fashioned cell phone Tabasco_Dave Oct 2012 #41
Here, too IDemo Oct 2012 #45
Sounds like the FBI has a hefty portion of their pension in AAPL. nt Comrade_McKenzie Oct 2012 #52
That would be smart, seeing as APPL is projected to rise 60% within a year. nt onehandle Oct 2012 #53
What division of the FBI - and since when does the FBI do such things? hexola Oct 2012 #60
This is not unprecedented. Android is so vulnerable, that they had to speak to the criminal aspect. onehandle Oct 2012 #61

onehandle

(51,122 posts)
13. Free me from the walled garden!
Mon Oct 15, 2012, 06:02 PM
Oct 2012

Free me from being able to do 100% of what 99% of smartphone users want to do with thousands of percent less chance of being infected/hacked.

Heh...

Xithras

(16,191 posts)
54. Freedom is an ugly thing
Wed Oct 17, 2012, 12:32 PM
Oct 2012

There will always be those who abuse it. Still, given the choice, I'd rather have my freedom and deal with the consequences. Keep your koolaid.

 

Bradical79

(4,490 posts)
28. I don't understand your comment
Mon Oct 15, 2012, 11:30 PM
Oct 2012

I don't see how the quality of a competitor's operating system relates to how ethical your company is.

 

Indydem

(2,642 posts)
29. I guess you don't read many tech blogs.
Mon Oct 15, 2012, 11:36 PM
Oct 2012

The "evil" is the closed vs. argument argument.

Google's Android is "open" which means the source code is readily available and modders and hackers are able to do more customizing of the software. This also means exploits can be located and used, and malware created. You can install android software from about anywhere and do not have to go through a centralized store.

Apple's iOS is "closed" or a "walled garden." All of the software is screened by Apple and verified of it's integrity before it goes intot he app store - the only place you can install software from.

This has absolutely nothing to do with the ethics of a company. If that were the case then Apple is one of the most ethical companies in the world, on several fronts.

 

Bradical79

(4,490 posts)
33. Yeah, I'm aware of that. I take "evil" to mean something different on this forum than a tech site.
Mon Oct 15, 2012, 11:59 PM
Oct 2012

I understand what you were saying now though. I'm a programmer, so yeah I do keep up with that stuff. Just this being a Democratic political site I was thinking as "evil" more in terms of things such as labor rights.

 

KamaAina

(78,249 posts)
2. This is not surprising. For years Windows PCs had many more problems with malware than Macs.
Mon Oct 15, 2012, 04:59 PM
Oct 2012

not only because Windows was (and is) ridiculously easy to exploit, but because the user base is much larger. So, malware writers, just like legitimate product developers, targeted the larger market.

boppers

(16,588 posts)
25. Hm...
Mon Oct 15, 2012, 11:08 PM
Oct 2012

Backwards compatible with viruses, applications, trojans? check.
Willing to cut corners for market share? check.
No control over endpoints? check.

I think you have a good point.

 

Panasonic

(2,921 posts)
3. Ruh roh.
Mon Oct 15, 2012, 05:01 PM
Oct 2012

I just bought Samsung Galaxy III S (16GB) for $200.

My father is swearing up and down that Samsung was selling them for $100, but can't find it.

My carrier is Sprint.

mwooldri

(10,303 posts)
22. He may have been talking about the Galaxy S II ...
Mon Oct 15, 2012, 09:06 PM
Oct 2012

... which co-incidentally Sprint were doing for $100 - Radio Shack had 'em for $75 on Sprint's network.

MuseRider

(34,111 posts)
37. Just protect it
Tue Oct 16, 2012, 12:53 AM
Oct 2012

like anyone with any sense would. Join a forum and get recomendations on progams to protect it. Easy peasy. I have both Mac and Android systems. I hate Macs but they do work well. I LOVE my Androids and they work every bit as well AND they play well with others who also play well with others.

unc70

(6,115 posts)
43. Not sure you can protect Android
Tue Oct 16, 2012, 09:46 AM
Oct 2012

I have been in the industry for well over 40 years. I'm an expert in networking, security, hardening systems, and a lot more. I have few illusions about security on any system, know most of them well. (personal respect goes to OpenVMS).

Android is a mess, probably beyond help.

unc70

(6,115 posts)
49. You can't protect smart end users either
Tue Oct 16, 2012, 01:45 PM
Oct 2012

You don't have to click on anything, nor download anything, nor go to a known bad site.

 

Indydem

(2,642 posts)
18. So you have to have an AV running in the background?
Mon Oct 15, 2012, 07:45 PM
Oct 2012

That's fine on a plugged in WinPC or a laptop with a battery the size of a brick, but on a smartphone?

No wonder my friend's android battery never made it to noon.

 

FredisDead

(392 posts)
8. But yet the
Mon Oct 15, 2012, 05:13 PM
Oct 2012

android phone outsells the iPhone 4 to 1 worldwide, and no Chinese workers are complaining to Google about the harsh working conditions at Foxconn.

onehandle

(51,122 posts)
16. Same factories.
Mon Oct 15, 2012, 06:06 PM
Oct 2012

The difference is that Apple is making hundreds of billions in profit. Google has lost 20 billion on Android.

onehandle

(51,122 posts)
46. A number of analysts have estimated around 20 billion.
Tue Oct 16, 2012, 11:08 AM
Oct 2012

Android is a loss leader. They are basically giving away devices to attempt to keep up with Apple.

20 billion isn't much to Google, and certainly not to Apple.

boppers

(16,588 posts)
26. "no Chinese workers are complaining to Google about the harsh working conditions"
Mon Oct 15, 2012, 11:13 PM
Oct 2012

Wow. You should totally read up on how this market works.

Hint: Foxconn clients: http://en.wikipedia.org/wiki/Foxconn#Major_customers

boppers

(16,588 posts)
55. Yup. Blaming Apple is not relevant.
Thu Oct 18, 2012, 12:03 AM
Oct 2012

I assume you are responding on a computer. Therefore, you are supporting FoxConn.

I could be wrong, of course, you could be typing with ink and mailing your responses to somebody else who uses a FoxConn machine to enter it... but I doubt that.

 

Bradical79

(4,490 posts)
34. Foxconn also does business with Google as of this year.
Tue Oct 16, 2012, 12:24 AM
Oct 2012

Google bought Motorola Mobility earlier this year and Motorola Mobility uses Foxconn.

defacto7

(13,485 posts)
10. Oh, please....
Mon Oct 15, 2012, 05:22 PM
Oct 2012

Everything listed on that post is applicable to all smart phones. No smart phone is immune including Apple/MS. ALL smart phones are vulnerable. It's the nature of computer marketing vs. technological stability of both hardware and software.

I very much dislike propaganda that muddies the facts to make a buck. It this really LBN?

 

TM99

(8,352 posts)
21. Exactly!
Mon Oct 15, 2012, 08:58 PM
Oct 2012

Any computing device that has the ability to be 'open' also runs the risk of more malware and viruses.

Yet, Apple is not immune to security issues either even though it is a walled-garden approach.

NASA has no problem using Android based phones for mission critical applications so really how much of a concern is this outside of the idiot American who should only use a device up to his or her educational level and expertise?

And guess which phone is used by the Pentagon? Yup, a modified Dell phone with a custom Android rom.

This IS propaganda disguised as news. Sadly, isn't most of the 'news' today that way?!

 

TM99

(8,352 posts)
36. He who controls the crap owns the crap
Tue Oct 16, 2012, 12:44 AM
Oct 2012

True, and iOS still has crap. It is just controlled more closely by Apple, and they make sure to get their 30% cut on that crap.

defacto7

(13,485 posts)
38. if you want to call it "making it harder to pile crap"
Tue Oct 16, 2012, 12:55 AM
Oct 2012

I call it protecting your product from being owned by the owner. Old story.

The OS is relatively insignificant. iOS/Unix/Linux basically the same thing. MS, is it's own mistake... plus a hidden unix shell !!!

The "crap" is the fault of the manufacturers of all these devices. The "pile" is the stuff made by people who take advantage of the "crap" made by the manufacturers.

The "hole" is the hardware, all of it, and no manufacturer is safer than another. But no one wants to talk about that.

Smart phones are easy targets period. Whether they are hacked from within or hacked from the outside the data is vulnerable.

If people want to play with these toys, they need to know what they should and should not do with them. The manufacturers will not help you beyond their stake in the profit... and that may include letting them own what you paid for.

Ironic... Sounds like right wing politics.

boppers

(16,588 posts)
56. Not using predictable memory locations is not crap. That's hardware design.
Thu Oct 18, 2012, 12:12 AM
Oct 2012

It's also why i386 family products were so lame and easily exploited.

Oh, and I'm not sure where you get the idea MS has a "hidden unix shell". cmd.exe is a long, long ways away from a unix shell.

As far as smart phones being "easy targets", it's not the hardware that's the target, it's the users. Owning a computing device is fairly easy, the harder part is owning the human using the device.

defacto7

(13,485 posts)
57. no, I'm not talking about cmd.exe... it lower than that.
Thu Oct 18, 2012, 03:30 AM
Oct 2012

You have to know how to access it and you won't find a "howto" it in the user manual.

I'll go along with part of your argument, I just don't think its complete. First, it is the hardware that makes the system a system. If you want the user, you target the programming and that's usually enough. If the programming is stealthy you target the holes in the hardware or the data on route. The hardware is manipulatable if you know how to access it. But your last statement may be making my point. I don't wish to own anyone and I sure don't want to be owned. But it also means I don't wish to be lead blindly. I think many people have no idea that are being lead blind. It's better that people learn to use their heads, not be a slave to a company, a brand, a system that use them and bilk them. But until people really want to be better than they are, they are still going to keep walking over that cliff.

boppers

(16,588 posts)
58. So, is it bash? Korn? Csh? Tcsh?
Thu Oct 18, 2012, 10:38 PM
Oct 2012

I have never heard of this "unix shell" and am curious. Do you mean the interface to the VMS kernel subsystem (a result of NT (and all future kernels) being a VMS hybrid)?

As far as the better hardware design, Apple, for many years (along with Sun, IBM, etc.), used hardware packages that were much, much harder to exploit, by design. The Wintel line needed backwards compatibility, as a business model. This meant (and still means) that backwards compatibility with malware was preserved.... so a virus written for MSDOS worked quite well for 20+ years, while a SunOS/Solaris virus only had a lifecycle of a few months to a few years, a MacOS virus had a lifecycle about the same.

Fair warning: I've actually written MacOS malware detection software, Wintel detection software, etc. I am not a fanboy.

defacto7

(13,485 posts)
59. Warning?
Sun Oct 21, 2012, 02:22 AM
Oct 2012

Ha... you've got to be kidding?
Now that's a little funny. And Fanboy? Jeess.
Anyone who comes up with cmd.exe as an answer, well... speaks for itself.
What the hell are you talking about? MacOS virus? Sounds like your selling something or your defending a fight I wasn't fighting, otherwise MacOS really has hit the waste bin.

I have nothing to prove, but you do seem to need to prove yourself. I'm not biting so no warning required.

Oh well... Enjoy beating your chest. And be well !

frylock

(34,825 posts)
11. FBI warns that stupid people are installing malware on their android devices..
Mon Oct 15, 2012, 05:45 PM
Oct 2012

that's really how the title should read. let's take a look at loozfon, for instance:

Security researchers from Symantec have detected a new Android trojan currently circulating in the wild, attempting to socially engineer Japanese female users into downloading and executing the application on their mobile device.

What's particularly interesting about this Android malware, is that it also has a built-in spreading capability, namely, it sends spam stating that the sender can introduce the recipient to wealthy men. When users click on any of the links found in the emails, they're prompted to download a copy of the malware.


http://www.zdnet.com/loozfon-android-malware-targets-japanese-female-users-7000003236/

finfisher is also installed on the device by, you guessed it, users clicking a link within an email. this is just common sense, folks. don't click links in emails and don't install unnecessary apps, particularly from untrusted sources.

MrsBrady

(4,187 posts)
19. thanks...
Mon Oct 15, 2012, 07:50 PM
Oct 2012

If you don't click on sh*& when you don't know who or what it is, then
you usually won't have a problem.

Hutzpa

(11,461 posts)
20. And morons are responsible for the bulk of this
Mon Oct 15, 2012, 08:49 PM
Oct 2012

yet they complain. Even if the law is changed, morons are still going to be morons. They make life just that much difficult for everyone else by being stupid.

Morons always wants to be part of a trend with no knowledge of how the product works, but since John and Jane Doe are using one it means they can use one also.

mwooldri

(10,303 posts)
23. Android by its open nature is more suspect to malware.
Mon Oct 15, 2012, 09:21 PM
Oct 2012

Add people who can be slightly dangerous with a computer onto an Android device - yep there's a recipe for disaster. Plus Android is a popular mobile operating system.

But this is not Windows for the 21st Century as someone up-thread pointed out. Unlike Windows, Android *is* open. You can get the source code. Android is more related to Linux than Windows. Also Android anti-malware software generally only runs when an application is being installed.

LTR

(13,227 posts)
32. Android IS Linux
Mon Oct 15, 2012, 11:42 PM
Oct 2012

And Android itself is open source, though there are some Android-derived OS's like MIUI that are proprietary. Plus, some companies like Samsung and HTC have their own interface overlays added to their phones.

mwooldri

(10,303 posts)
51. Android and Linux share common code.
Wed Oct 17, 2012, 12:27 AM
Oct 2012

The Android kernel is a fork off the official Linux kernel, but at the application level they don't have much in common at all. It would take a fair bit of work to get a Linux app to work in Android and vice versa.

LTR

(13,227 posts)
30. Sometimes it's the apps themselves that you have to worry about
Mon Oct 15, 2012, 11:39 PM
Oct 2012

I'm an Android user, running a rooted phone with a custom CyanogenMod-derived ROM. It originated on the XDA forum, and those people really rip these things apart in the building and testing processes. I haven't had any serious issues in regard to malware, Trojans, etc.

What any smartphone user should be concerned about are questionable apps that ask for strange permissions, or do unauthorized things with them. For example, games really don't need access to your contacts list. Check the comments on Google Play or the Apple App Store.

And download apps from reputable sources that do their best to weed out malicious apps. They don't always get them at first, but they do act quickly.

MuseRider

(34,111 posts)
39. Yes, just use good common sense.
Tue Oct 16, 2012, 01:00 AM
Oct 2012

I have been using Androids since the first Motorola Droid. I am a stupid user, don't know much but I do know to protect my stuff. This is rubbish news as even I have been able to avoid problems.

alp227

(32,026 posts)
31. I am an Android user (who has used it to post on DU at times)
Mon Oct 15, 2012, 11:40 PM
Oct 2012

And what I do is configure my droid so that it does not accept apps outside the Google Play service. And of course avoid clicking on suspicious links whether thru email or BBS etc.

 

hexola

(4,835 posts)
60. What division of the FBI - and since when does the FBI do such things?
Sun Oct 21, 2012, 07:16 AM
Oct 2012

I just don't see how this is possible...how can such an agency make comment about the functionality of one product?

Who do you think is thanking the FBI - Android or Apple?

onehandle

(51,122 posts)
61. This is not unprecedented. Android is so vulnerable, that they had to speak to the criminal aspect.
Sun Oct 21, 2012, 08:59 AM
Oct 2012

Android is clearly the new Windows.

Latest Discussions»Latest Breaking News»FBI warns that Android ph...