[Information] Continuous threats of Android malicious files

1. Information

In this year, the quality and quantity of Android malicious applications are extremely higher.
Phone's device information, SMS, and GPS were collected so far, though, those collected information begins to combine. In case of certain applications made for general purpose, if those applications contain suspicious code which has even a bit of possibility of danger, those can be categorized as "Malicious application".



The number of "Malicious application" is getting higher in Android communities.
Besides, just collecting personal information and leaking it can be the proof of being categorized as a malicious app.

INCA Internet response team extends its monitoring range to response various kind of security threats.

2. Update status of nProtect Mobile for Android 

Following figure shows the number of update samples of 1Q of 2012.

Status on Jan

Status on Feb

Status on Mar

With this statistical table, we can check the number of malicious applications.
Spreading Android malicious files is no more news, and we need to be careful on downloading APK file.

3. Summary

Recently, various kind of malicious application including certain APK doesn't contain its run icon are emerging. This is the key feature against previous malicious applications. And it contains various vulnerability and works as a bot.

[Issue] Zombie phone on calling for Korean user? 

http://en-erteam.nprotect.com/2012/04/issue-zombie-phone-on-calling-for.html

[Information] Android applications without run icon 

http://en-erteam.nprotect.com/2012/04/information-android-applications.html

To use smartphone safely from security threats of these malicious applications, we recommend following tips "Smartphone security management tips" for general users.

Smartphone security management tips

1. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function.
2. Download the proven application by multiple users at all times.
3. Use mobile anti-virus SW to check downloaded application before using it.
4. Do not visit suspicious or unknown site via smartphone.
5. Try not to see MMS, text, e-mail from uncertain user.
6. Set strong password on smartphone always.
7. Turn the wireless interfaces like Bluetooth only be used.
8. Do not save important information on phone.
9. Do not try illegal customizing like rooting or jailbreak.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with “nProtect Mobile for Android” for mobile such as malicious file stated above and runs responding system against various security threats.