CONFERENCE Cyber AI & Automation Summit - Watch Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

Mobile Security Firm Analyzes 1.7 Million Android Apps

Mobile security firm TrustGo Mobile recently released a report that examined the Android threat landscape across 175 Android markets and 1.7 million Android apps.

Mobile security firm TrustGo Mobile recently released a report that examined the Android threat landscape across 175 Android markets and 1.7 million Android apps.

Similar to PC-based malware analysis, keeping up with the massive volume of malware samples makes it virtually impossible to review samples manually, making automation key in the scanning process. In the case of TrustGo’s analysis, with the high volume of Android Apps hitting various Android markets, they use their “App Reputation Technology” which analyzes all new Android apps uploaded to monitored marketplaces, usually within three to five hours, the company said.

For their report, TrustGo scanned 1.7 million apps found on 175 marketplaces worldwide between June and August, and categorized each app into one of four categories:

· Certified (Safe to download)

· Malicious (Containing a virus, Trojan, spyware, etc.)

· High Risk (Containing code that leverages granted permissions to create a security risk) and,

· Low Risk/Noisy (Has potential to annoy users with excessive notifications or advertisements).

Highlights of the report include:

Advertisement. Scroll to continue reading.

· Dramatic increase in malware from 11,822 to 25,580, an increase of 216% from the previous three-month period

· China-based app marketplaces are the most risky in the world with 33.2% of apps flagged as Malicious, High Risk, or Low Risk/Noisy

· Google Play ranks as the 5th safest marketplace, though currently hosts more than 90 malicious apps

· The Anzhi marketplace in China is the most risky major market with a 62.8% risk rate; Aproov based in Europe was considered the safest overall at 2.1%

· More than 1 in 6 apps available worldwide have High Risk code that can compromise user security

· Games are most likely to be infected by risky code, social media and productivity apps are least likely

· 94% of High Risk apps can send users mobile phone number to third parties.

“While viruses and risky apps are a global problem, some regions are more dangerous than others,” says Xuyang Li, founder and CEO of TrustGo. “Many Chinese users can’t access the Google Play marketplace, so a large number of third party stores have popped up to fill the void. Unfortunately, this has made China’s marketplaces especially insecure because many download sites haven’t set up controls necessary to keep bad apps off their platforms.”

These marketplaces, predominantly based in the U.S., Europe, China and Russia, are accessible to an estimated 700 million smartphone users (Ericsson, June 2012) around the world.

TrustGo created the infographic below, which highlights some of the findings revealed in the report:

Android Mobile Threat Report

Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is founder and director of several leading cybersecurity industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Don’t miss this Live Attack demonstration to learn how hackers operate and gain the knowledge to strengthen your defenses.

Register

Join us as we share best practices for uncovering risks and determining next steps when vetting external resources, implementing solutions, and procuring post-installation support.

Register

People on the Move

Shanta Kohli has been named CMO at Sysdig.

Cloud security firm Sysdig has appointed Sergej Epp as CISO.

F5 has appointed John Maddison as Chief Product Marketing and Technology Alliances Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.