Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

Mobile Security Firm Analyzes 1.7 Million Android Apps

Mobile security firm TrustGo Mobile recently released a report that examined the Android threat landscape across 175 Android markets and 1.7 million Android apps.

Mobile security firm TrustGo Mobile recently released a report that examined the Android threat landscape across 175 Android markets and 1.7 million Android apps.

Similar to PC-based malware analysis, keeping up with the massive volume of malware samples makes it virtually impossible to review samples manually, making automation key in the scanning process. In the case of TrustGo’s analysis, with the high volume of Android Apps hitting various Android markets, they use their “App Reputation Technology” which analyzes all new Android apps uploaded to monitored marketplaces, usually within three to five hours, the company said.

For their report, TrustGo scanned 1.7 million apps found on 175 marketplaces worldwide between June and August, and categorized each app into one of four categories:

· Certified (Safe to download)

· Malicious (Containing a virus, Trojan, spyware, etc.)

· High Risk (Containing code that leverages granted permissions to create a security risk) and,

· Low Risk/Noisy (Has potential to annoy users with excessive notifications or advertisements).

Highlights of the report include:

Advertisement. Scroll to continue reading.

· Dramatic increase in malware from 11,822 to 25,580, an increase of 216% from the previous three-month period

· China-based app marketplaces are the most risky in the world with 33.2% of apps flagged as Malicious, High Risk, or Low Risk/Noisy

· Google Play ranks as the 5th safest marketplace, though currently hosts more than 90 malicious apps

· The Anzhi marketplace in China is the most risky major market with a 62.8% risk rate; Aproov based in Europe was considered the safest overall at 2.1%

· More than 1 in 6 apps available worldwide have High Risk code that can compromise user security

· Games are most likely to be infected by risky code, social media and productivity apps are least likely

· 94% of High Risk apps can send users mobile phone number to third parties.

“While viruses and risky apps are a global problem, some regions are more dangerous than others,” says Xuyang Li, founder and CEO of TrustGo. “Many Chinese users can’t access the Google Play marketplace, so a large number of third party stores have popped up to fill the void. Unfortunately, this has made China’s marketplaces especially insecure because many download sites haven’t set up controls necessary to keep bad apps off their platforms.”

These marketplaces, predominantly based in the U.S., Europe, China and Russia, are accessible to an estimated 700 million smartphone users (Ericsson, June 2012) around the world.

TrustGo created the infographic below, which highlights some of the findings revealed in the report:

Android Mobile Threat Report

Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Expert Insights

Related Content

Mobile & Wireless

Infonetics Research has shared excerpts from its Mobile Device Security Client Software market size and forecasts report, which tracks enterprise and consumer security client...

Mobile & Wireless

Samsung smartphone users warned about CVE-2023-21492, an ASLR bypass vulnerability exploited in the wild, likely by a spyware vendor.

Malware & Threats

Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down.

Fraud & Identity Theft

A team of researchers has demonstrated a new attack method that affects iPhone owners who use Apple Pay and Visa payment cards. The vulnerabilities...

Mobile & Wireless

Critical security flaws expose Samsung’s Exynos modems to “Internet-to-baseband remote code execution” attacks with no user interaction. Project Zero says an attacker only needs...

Mobile & Wireless

Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.

Mobile & Wireless

Two vulnerabilities in Samsung’s Galaxy Store that could be exploited to install applications or execute JavaScript code by launching a web page.

Mobile & Wireless

Asus patched nine WiFi router security defects, including a highly critical 2018 vulnerability that exposes users to code execution attacks.