ie8 fix
Click Here

Between the Lines

Larry Dignan, Andrew Nusca and Rachel King

McAfee: Malware surging on mobile platforms, especially Android

By | August 22, 2011, 9:01pm PDT

Summary: Malware is becoming a very dangerous problem for mobile operating systems, and Android is becoming the top target.

Mobile platforms are anything but safe from malware, based on the second quarter Threats Report from McAfee.

Android, in particular, was found to be the most vulnerable mobile operating system on the market, as malware targeted towards Google’s OS has skyrocketed 76 percent since the previous quarter. That’s a very sobering statistic for both Android developers and device owners.

McAfee went so far as to call Android the “most attacked mobile operating system,” surpassing Symbian OS as the most popular target. Still, Symbian OS and Java ME remain the most targeted to date.

Because of the rapid escalation, McAfee has dubbed this situation as a “Malware Zoo,” as McAfee researchers predict that the the grand total of total malware samples will reach at least 75 million by the end of 2011. The total currently stands at approximately 65 million.

Vincent Weafer, senior vice president of McAfee Labs, explained in a release:

This year we’ve seen record breaking numbers of malware, especially on mobile devices, where the uptick is in direct correlation to popularity. Overall attacks are becoming more stealth and more sophisticated, suggesting that we could see attacks that remain unnoticed for longer periods of time. High-profile hacktivist groups have also changed the landscape by drawing a line between attacks for personal gain and attacks meant to send a message.

McAfee warned that malware, particularly for Android, could appear in “everything from calendar apps, to comedy apps to SMS messages to a fake Angry Birds updates.”

Other highlights from the study:

  • Apple has become more of a target for malware authors as more Mac OS X computers are being affected by fake anti-virus software
  • Stealth malware has increased more rapidly in the last six months than in any previous period with an increase of nearly 38 percent than the same time last year
  • Hacktivists, primarily Anonymous and LulzSec, were among some of the most prominent cyber news generators for Q2
  • At least 20 global attacks were reported in Q2 alone, and with the majority allegedly stemming from LulzSec

On the bright side, spam is being issued at historically low levels.

Related

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Rachel King is a staff writer for ZDNet based in San Francisco.

Disclosure

Rachel King

Rachel King has no business relationships, affiliations, investments, or other potential conflicts of interest relating to the content posted in this blog.

Biography

Rachel King

Rachel King is a staff writer for CBS Interactive in San Francisco. Before serving as a contributing editor at ZDNet in New York City for two years, she previously worked for The Business Insider, FastCompany.com, CNN's San Francisco bureau and the U.S. Department of State. Rachel has also written for MainStreet.com, Irish America Magazine and the New York Daily News, among others. Rachel has a B.A. in Mass Communications and History from the University of California, Berkeley and a M.S. in Journalism from Columbia University, where she served as art director for the student magazine, Plated.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
88
Comments

Join the conversation!

Just In

bitcrazed, it appears that Mr. Schmitz views his world
Mister Spock 26th Aug
@bitcrazed
through his Linux rose coloured glass house.
plain
This can't possibly be true because Android is built atop Linux and Linux is completely and utterly secure and impossible to infect with malware. Same goes for OSX - Steve & Co. said OSX was impervious to malware.

Right?

Right.
0 Votes
+ -
well no
sportmac 23rd Aug
@bitcrazed
no one that knows ever made these claims. certainly not steve and co. or any linux guru. now, if you're talking about people that post silly things in web forums, sure, the claim has been made. like other silly claims. see above for an example.
@sportmac

A very vocal Linux guru that frequents these talk backs is always going off about how secure and invulnerable Linux is.
@sportmac

Yeah, actually Steve & Co did say that, several times on their commercials. Mac vs PC. google it
0 Votes
+ -
Message has been deleted.
bitcrazed Updated - 24th Aug
  • Flagged
0 Votes
+ -
Never trust advertising...
cornpie 23rd Aug
@bitcrazed ...and always read carefully. Note they say ""It doesnt get PC viruses. A Mac isnt susceptible to the thousands of viruses plaguing Windows-based computers...".

And its true. A Mac cannot get one of the viruses or other malware written for Windows. What they CAN get it malware written for a Mac. Microsoft could just as easily put out an add saying : "Your Windows based PC is invulnerable to the Mac Defender malware!" and it would be true and yet irrelevant because its not invulnerable to the nearly identical scamware written for windows.

It all comes down to this: Do not trust advertising. Even for products you like
@all
Yeah,someone proclaims they're a Linux guru in a web forum and you take that to the bank. Ok then.

No one said it's not susceptible. They said it's nt as susceptible as windows and when you look at the amazing holes windows has had over the years it's true. The mac will never have that many holes. Holes? Yes. Thousand and thousands? No.
Geesh.
@sportmac

Windows doesn't have "thousands of holes".
  • Flagged
@sportmac Steve jobs has been saying mac's dont get viruses for the longest time. So shut face.
  • Flagged
@all
not thousands of holes? perhaps. this is the os that could get a virus through the clip art of a word document.

shut face? your's is a dizzying intellect. you state jobs has said something with no proof and that ZING just one snappy snappy retort! well done laddie. really. a dizzying intellect.
  • Flagged
0 Votes
+ -
Message has been deleted.
Cylon Centurion Updated - 24th Aug
  • Flagged
0 Votes
+ -
Message has been deleted.
bobiroc Updated - 24th Aug
  • Flagged
@sportmac
In reality world, meaning not the world of carefully parsed statements so many Apple and Linux enthusiasts live in, far far too many Mac users and Linux users simply poo-poo away the notion that the reason Windows has been breached so many times is that its the big target. They belittle that concept as being at best a secondary reason far and away removed from what they see is the real reason. That is to say that Linux and OSX don't get attacked because its practically impossible to do so. They of course will point out that they have said "practically" impossible. Even if what they hope the world sees is "completely" impossible.

And here we have what is arguably the most common smartphone OS, being Android having the most at risk security. Right now you can absolutely count on the aficionado's of Android and perhaps even iOS thinking up marginally rational explanations for why Androids popularity has no connection to its risk factor, and yet still not have to admit to any inherent security flaws. A difficult task at best.

And as so far about silly claims, you can say what ever you want but as many silly claims as Windows users may have ever made, OSX and Linux users have made exponentially more silly claims given their lack of market share.
@bitcrazed
If you disable enough Linux security features you wind up with something as insecure as Windows, I suspect this is the case with Android.

Linux + sudo chmod -R ugo+rwx /* = Windows
@AndyPagin Keep posting your crap. Nobody believes it anymore except Linux zealots.
  • Flagged
@AndyPagin

Funny.. The same can be said about Windows. If you turn off things like UAC, Firewall, IE Protected Mode, run Windows Unpatched and disregard security/safety while browsing your Windows could be compromised.

Change a few things around specific to that OS and that is true of any Operating System or software.
  • Flagged
@AndyPagin:

You forgot that the Windows fan boys can't read Unix/Linux code.
  • Flagged
0 Votes
+ -
Message has been deleted.
RocketEater Updated - 24th Aug
  • Flagged
@bitcrazed

Read the article again. These aren't viral infections, they are stealth attacks made possible by fooling the user into downloading them. Not an OS issue really. If you're going download unverified apps, or click on any link sent to you, you're going to have problems regardless of OS or device.
@Gozers
HAHAHAAHA a freetard back peddling got to love it. You guys for years have been blaming MS no matter if it was user caused or not. Now that its happening to a linux OS oh no its the user its the user HAHAHAHAHHAHHA
  • Flagged
0 Votes
+ -
There's that 1% again, @Stan57
ScorpioBlue 23rd Aug
Ya know...the greatest 1% in the whole wide world. The one that keeps you awake nights.

wink
@Gozers
true indeed.
@bitcrazed You can't show anywhere on the web where S. Jobs said that. That's writer's, sitting around dreaming of Apple's downfall, who make-up these statements. I'm pretty sure Apple's official statement was "Mac's do NOT have a problem with viruses or malware. True then, still true now! Apple doesn't get viruses & malware is a trap for the ignorant on the web. Only "green-noobs" click malware sites! Apple simply releases a fix in-case their are users that didn't know any better. Once the Mac is updated, the malware is gone. Plus, those sort of bugs can't replicate in Mac's.
@SBMobile

Go back and watch the commercials of Mac vs PC. The website may say PC Viruses but the actors simply stated that they wanted a Computer that is not affected by viruses.

The sad part is Apple played right into the ignorant consumer knowing full well that Viruses and Worms were pretty much things of the past and today's infections are more of the Trojan or Malware that tricks the user into installing it by pretending to be a security software suite or some entertaining video or application.

So unless you are still running XP Pre-SP2 or running without security software and blindly clicking on things you are pretty safe no matter what OS you use.
@bitcrazed Wrong!

OS X is based on BSD Unix, not Linux. There has never been a self-replicating virus for Mac in the wild...never. The most successful attacks ever on Macs are the fake anti-virus downloads that depend on former Windows users being uninformed enough to want to put anti-virus software on their Macs. In order to be exploited one has to manually download the app, run the install, and supply an admin password for installation. Even then OS X will warn you before the first execution that this app was downloaded from the net. How much more protection from "stupid" do you need?

As for iOS, yes, there have been many patches and many attacks. I'm unaware of any SUCCESSFUL attacks, however.
@ZekeStonekiller
i hate apple ,but what you said is true.
0 Votes
+ -
No...
olePigeon 23rd Aug
"This can't possibly be true because Android is built atop Linux and Linux is completely and utterly secure and impossible to infect with malware. Same goes for OSX - Steve & Co. said OSX was impervious to malware."

No. Not even Apple said that. Apple said that Macs can't be infected by the thousands of PC viruses. The way UNIX and Linux permissions work, it makes it difficult to write viruses and worms that can self propagate and infect a UNIX or Linux system. Not to mention Windows binaries are generally not compatible with Linux or UNIX. This also doesn't mean they're invulnerable, just more difficult to write viruses.

This article is talking about trojans and malware that aren't viruses. You can write an application that does something malicious. It doesn't matter how secure the OS is, if the user installs the application, then grants the application permission to run, it'll run and do what it needs to.

Linux, UNIX, and Windows could be the most secure OSes in the world, but it can't be secured against naive and gullible users.
@bitcrazed
not true.
i got virus recycler on my android phone (2.2) while it was connected to the pc (windows 7) and all my folders got screwed.. got to format the sd.
plus consider the fact of comparision between windows users vs osX users... i'm pretty sure there are millions more for microsoft's OS...
so think as a virus or malware developer.. who will be your target? few or many?
0 Votes
+ -
@bitcrazed
There are several problems with your sarcasm.

First, these attacks are almost completely Trojans. No general purpose operating system is impervious to Trojans because the administrator can do what he wants, and someone has tricked him into wanting to install malware.

Second, the Linux kernel is not being used as an attack vector for any Android malware that I have heard of, so Linux is not being exploited for any of this malware.

Third, no operating system has perfect security. Most distributions of Gnu/Linux (a different operating system than Android) have relatively good security, but there is always a possibility for there to be a security hole. One of the strengths of the Unix (and Linux) approach is that the system is shielded from mistakes of the user because users run without administrative rights. As far as I know, this approach is not followed so strictly with Android, so it's security is not likely to be as good.
0 Votes
+ -
McAfee = Malware.
kraterz 22nd Aug
Today, McAfee = Malware. Comes second only to Norton / Symantec.
0 Votes
+ -
For the most part -- How true.
kenosha77a 23rd Aug
@kraterz

I tend to avoid anti-virus and anti-maleware on my Apple platforms except for the very infrequent spot checks of my system. (Those spot checks over the past seven years has only reinforced my impression that antivirus and antimalware software can be avoided if one practices safe online procedures. Of course, that's a very big IF.)
@kenosha7777
yes indeed ,very big "if" because the user himself is usually the biggest hole in any security system.
And in other news, McAfee announces an Android version of McAfee Anti-virus. What a surprise, an AV company predicts millions new malware threats. They appear to be literally trying to "Scare up new business."
0 Votes
+ -
...and watch your battery power and performance drain away...
0 Votes
+ -
I can't take warning from McAfee seriously.
Dietrich T. Schmitz * Your Linux Advocate Updated - 23rd Aug
And I stake my reputation on it.
Thanks bobiroc
@Dietrich T. Schmitz * Your Linux Advocate - and yet if McAffee was to release a warning about a flurry of malware releases attacking Windows, you'd be all over it proclaiming the virtues of Linux' many superior and foolproof protections against malware.
@bitcrazed EXACTLY! I find that interesting - note NOT shocking but interesting.
0 Votes
+ -
Now now. You know Linux doesn't need AV software.
Dietrich T. Schmitz * Your Linux Advocate 23rd Aug
@bitcrazed
You are looking through your old pair of MS rose-colored glasses per usual.

If I had to make a choice (and I do at work) I'd choose Symantec Endpoint any day.

I work with Windows, you know. (wink)
I work with Windows, you know. (wink)

Oh don't say that, DTS. The Redmond fanboy glee club can't handle it.

lol...
  • Flagged
@bitcrazed
through his Linux rose coloured glass house.
plain
@Dietrich T. Schmitz * Your Linux Advocate

Do you stake your reputation on it?
@bobiroc LOL
  • Flagged
0 Votes
+ -
Oh, that's right. Thanks, I forgot
Dietrich T. Schmitz * Your Linux Advocate 23rd Aug
@bobiroc

Updated.
0 Votes
+ -
Fascinating.
Mister Spock 26th Aug
@Dietrich T. Schmitz * Your Linux Advocate
So you praise McAfee when they report a security issue with Windows, yet dismiss them when they find issues with Linux security.

plain
I have now read two online reports regarding malware on mobile platforms over the past sixty days. Those reports cite studies from Symantec and now McAfee that indicate iOS systems, so far, are rather secure.

Let me cite an AppleInsider June 28th article reporting their findings regarding this malware issue.

Quoting from that article, Symantec's report concluded that Apple's provenance approach acts a a strong security barrier as every app that is to be released on the App Store goes through vetting procedures -- which has proved a deterrent against malware attacks, data loss attacks, data integrity attacks and denial of service attacks. The report characterized iOS as well designed and thus far has proven largely resistant to attack. (All the above should be in quotes.)

The Symantec report also concludes that Google's Android ecosystem is less secure than Apple's iOS ecosystem. Although, to cover all their bases, they did indicate security breach possibilities for iOS systems.

Now comes a report from McAlfee that has a very similar tone and reaches the same conclusions. That report only cites a minor malware issue (sorry,Ed Bott, but its true) for OS X devices. Rachel's article says nothing about the iOS platform so I'll conclude that not much was there to report.
@kenosha7777

Let me cite an AppleInsider June 28th article

LOL.
@Hallowed are the Ori

It is a Symantec report. The publishing source is irrelevant -- much like the Ori
It is a Symantec report

Symantec? DOUBLE LOL!!!!
@Hallowed are the Ori - you got there before I did wink

@kenosha7777 - Yeah, wonderfully credible unbiased source there!

Let's take another far more credible source:
Charlie Miller to Unveil 20 Zero-day OS X Exploits at CanSecWest
Researchers sound alarm over critical Mac OS X bug

OSX is no more resilient to determined hackers than any other OS. in fact, Lion has only just fixed Snow Leopard's shoddy ASLR implementation. OSX is also only now being targeted by serious hackers. Apple has MANY years of security turmoil to go through yet. The big problem, however, is that Apple has mis-sold it's product to unsuspecting customers by stating that they're largely impervious to malware. I for one think that this may yet come back to bite them on the ass when the class action lawsuits inevitibly arrive.
0 Votes
+ -
tactic used when one can't debate on the merits of the argument.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix