Android Security and Privacy

From Free Knowledge Base- The DUCK Project: information for everyone
Revision as of 17:56, 26 May 2012 by Admin (Talk | contribs)

Jump to: navigation, search

The number of free Android apps that may be infected with malware is on the rise. Although some of free apps might look suspicious, others bearing names such as "Quick Notes" or "Chess" seem innocent, yet contain some of the worst payloads.

Tips to Avoid Malware

  1. Always research the publisher of the app. What other apps does it offer? Do any of them look a bit shady? If so, you should probably stay away.
  2. Read online reviews. Android Market reviews may not always be truthful. Check around to see what reputable Websites are saying about the app before you hit the download button.
  3. Always check app permissions. Whenever you download or update an app, you get a list of permissions for it. An alarm clock app, for instance, probably shouldn't need to look through your contacts. The general rule of thumb: If an app is asking for more than what it needs to do its job, you should skip it.
  4. Avoid directly installing Android Package files (APKs). When Angry Birds first came to Android, you could get it only through a third party. This is called "sideloading," or installing apps using an .APK file. Although Angry Birds wasn't malware, in general it is highly advisable not to download and install .APK files that you randomly come across. Most of the time you won't know what the file contains until you install it--and by then it's too late.
  5. Put a malware and antivirus scanner on your phone. Although many people still think that antivirus scanners on phones are useless, maybe outbreaks such as this one will change minds. Several different big-name security companies already offer mobile-security options, many of them free. I myself had downloaded "Spider Man," which is on a bad-apps list. My Lookout software identified it as a Trojan horse.

source: PC World Malware Off Your Android Phone: 5 Quick Tips

Free Apps and Adware

Some free android apps do not have advertisements, while others do. Adware is free software that has advertisements for other products and services displayed within the app that you see while you use the app. They connect to the Internet, using your data, and update the advertisements. The more aggressive ones collect data about you from your device memory and send it back to companies that use that data. Finally, the most aggressive adware actually downloads and installs trial apps onto your device without your permission.

A Major criticism of Google Play is that it is not clear which apps are adware and which are not. In the days of Tucows, Freeware is not the same as adware. What's worse is that passive adware is being replaced by more aggressive push adware, and furthermore by outright spyware that is collecting data about you from your own android device and sending it back to 3rd parties.

Detect addons (push adware and some malware related to advertising): Use https://market.android.com/details?i...addonsdetector

There is also "Lookout Security launched its free Ad Network Detector" but it does not flag apps that exhibit aggressive ad serving. "The intent of this product is to clarify for users the behaviour of applications that display ads," said Derek Halliday, senior product manager for security at San Francisco-based Lookout. "And two, to show users what privacy and information collection apps and their ad networks are doing. We're trying to provide transparency."

source: ComputerWorld UK Lookout Ad Network Detector sniffs out aggressive Android 'adware'

Android Phone's Notification Area Ads

If you have installed an adware app using push ads, you may see behavior described by Android user as follows, "In my notification bar (where phone signal, etc. is) a green plus symbol will appear. When i bring down my notification menu it's suggesting to download an app." This person installed something from Google Play containing push ads. It was advertised as a free app with no mention of using push ads.

One remedy is to install an app such as "Airpush detector" or "Addons Detector". They can identify which app has those plug-ins.

There are some new apps reported to block ads from going to your phone even if you have adware installed. One is known as Adaway but should be used with caution.

source: The Spicy Gadgematics Remove Android Phone's Notification Area Ads Quickly - Airpush.

 

 

 

Keywords: Android Tablet PC Samsung Galaxy Tab Two 2