THE LATEST IN MOBILE SECURITY
Fake Netflix App Poses Data-Stealing Risk
Symantec discovered a fake Trojan that poses as the Netflix application on the Android phone. The fake application asks for a login and password just as real one does. It then sends a warning that the user’s hardware is incompatible and recommends uninstalling the app and installing another version. This application then stores your personal information. It is still unknown what the hackers intentions are but always research the applications on your phone before downloading them.
Read More: Fake Netflix App Poses Data-Stealing Risk @ PC world »
Is that really a text message from your bank?
Smishing, a new tactic of gain personal information through SMS, is now gaining the attention of state investigators. The attorney general’s office is reporting that imposters are using the names of major banks and credit card companies to send fake mobile alerts. The scammers send text messages that give an alert that says “Your card has been deactivated” and give a contact number. When calling the contact number a recorded message that sounds like a voice simulator says “Welcome to Wells Fargo online 24 hours card activation services. Please enter your 16 digit card number”. This tricks you out of your account information and gives the scammers everything they need to steal.
How to distinguish between a scam and the bank or credit card company: no legitimate business will ever call and ask for your personal information. If you are contacted by a stranger that asks for any accounts, passwords, or social security numbers, just hang up or hit delete. If you do reply contact your bank as soon as possible to report the fraud.
Read More: Is that really a text message from your bank? @ Katu.com »
Sleazy Ads on Android Devices Push Bogus ‘Battery Upgrade’ Warnings
Sleazy ads indicating the need for a battery upgrade application on Android devices are starting to pop up. These ads prod you to download but have nothing to do with improving your device’s battery life and can endanger your privacy. Some applications download right away if the ad is accidently tapped. These ads fill a common anxiety as users are concerned about their battery being sucked dry.
The Android battery application called Battery Doctor and Battery Upgrade are particularly harmful as they do not upgrade the battery but steal the phone’s address book and the phone’s unique identifying IMEI number. With this information an attacker can clone the phone; intercepting calls, SMS messages, and initiate premium calls or SMS services that charge the user an excessive amount of money.
PCWorld stumbled across ads for these applications on many popular games such as Hasbro’s free version of Scrabble and Angry Birds. The battery ads on Angry Birds pointed to an application in the Google Android Market that tried to charge users $10 a month sending premium text messages via the customer’s phone.
When downloading applications take precautions and pay close attention to the permissions the applications request and read reviews on the applications carefully. Download mobile security protection to ensure no malicious malware is infecting your phone. Lastly, call your wireless carrier when in doubt.
Read More: Sleazy Ads on Android Devices Push Bogus ‘Battery Upgrade’ Warnings @ PCWorld »
Charging Stations May be ‘Juice-Jacking’ Data from Your Cellphone
Convenient charging stations that have been popping up can be infiltrating your smartphone by “juice-jacking”. Many smartphones are configured to transfer data or sync whenever they are plugged into a USB port. The cell phone stations are created to act as a USB port creating them to be hacker friendly without realizing it. A hacker can simply tweak the charging stations and program them to download your entire personal cell phone data or upload malware once your phone is plugged in.
Instead of relying on these charging stations for traveling, always carry an adapter, practice battery-saving tips, or use a solar powered charging device. If you must use the third-party charger, turn your smartphone completely off before plugging into the kiosk.
Read More: Charging Stations May be ‘Juice-Jacking’ Data from Your Cellphone @ PCWorld »
10 Ways to Secure Your Smartphone
With the increase of new vulnerabilities being detected in mobile operating systems, it is key to know ways to protect yourself from cybercriminals and regular criminals. ZDNet Asia uncovers 10 security measures to take on their smartphone from IT insiders.
1. Set Passwords
Paul Ducklin, the head of technology at Sophos, explains a recent survey found that 22 percent of users had lost their mobile devices in the last 12 months and 70 percent of those people did not have their phones password protected. This allows the finder of those lost phones to have access to messages, phone calls, and personal information.
Ducklin also added that the main reasons why people do not set passwords on their mobile device is the hassle of having to type a password before doing anything. The benefits though outweigh the tediousness of unlocking the mobile device as the owners data is ensured to be safe when the phone is physically lost.
2. Utilize all security features
Users sometimes forget about the security features already available on the phones that they can use. Adding a phone lock can add to the level of security and privacy.
3. Download apps from reputable sources and update regularly
An increasing problem that is developing is users unknowingly download malware to their mobile device. Consumers sometimes forget to question the authenticity of free applications especially in an open source market such as the Android Market. Only apps from reliable sources should be installed and other apps should be researched before downloading them.
4. Understand Application Permissions
Users should be cautious when accepting requests for personal or device information on their mobile devices. Applications could be requesting access to parts of the phone and personal information. This allows cybercriminals the ability to gather information or send information to the device through a remote URL.
5. Disable Wi-Fi auto-connect option
Many mobile phone users have a tendency to enable their devices to automatically connect to Wi-Fi networks which cybercriminals can take advantage of by setting up fake Wi-Fi networks that allow them to hijack personal information.
6. Consider a mobile security app
Smartphone users should invest into an effective mobile security solution, such as Snap Secure PRO, to help protect personal information. They can secure mobile banking transactions and stop malware before they infect the device. Also some security software helps protect against theft and has call blocking technologies.
7. Use a SIM code
Add a SIM card code that is required when the phones are rebooted because although a device can be password protected the SIM card is not. If someone steals a user’s SIM card, they can use the users account for free on any device.
8. Sync phone for backup
Users should use syncing software to back up their digital data on their phones to their computers. This enables nothing to be misplaced if the phone is lost or stolen.
9. Reduce location-sharing
“Checking in” and GPS location services have opened a new way to keep in touch with family and friends but comes at a cost of personal privacy. It is suggested to configure the security settings on your smartphones and turn off the GPS unless it is absolutely necessary to have.
10. Check before clicking links
Users should be careful when clicking on links from websites especially social networking sites as the links could be malicious when they are executed without permission.
Read More: 10 Ways to Secure Your Smartphone @ 10 Ways to Secure your Smartphone »