Main Content
Viral
A nightmare most cell phone users have tried not to think about, smartphone malware and viruses are becoming harder to ignore

The New Year kicked off with a growing number of reports that new kinds of malware are targeting smartphones. While Nokia’s Symbian and Google’s Android were the operating systems most likely to be hit, even the iPhone was not immune to malicious applications. The BlackBerry, which is especially popular in the business world, has been the only unaffected smartphone so far. The seeming invulnerability of the Research In Motion (RIM) produced phones, like the BlackBerry, has led some observers to wonder if this will give them an edge on the market.
BlackBerry phones utilise an encrypted script that has proven resilient to malicious applications, but other producers are making their own attempts to combat the problem. Apple tries to limit the spread of viruses by maintaining tight control over the App Store. The company’s top-down approach is generally successful when it comes to viruses, but it does not provide complete security. Users are not fully shielded from unauthorized tracking and sharing of their data. The Apple website explains that those affected by malware are mainly users who modify their iPhone’s operating system without the company’s permission, falling victim to hackers who “steal personal information, damage the device, attack the wireless network, or introduce malware or viruses”. Clearly, this should be a warning to all those who do not comply with the Apple terms of agreement.
Placing the blame on modified iPhones, however, may not be enough to let Apple off the hook. A study carried out at the Technical University of Vienna suggests that non-jailbroken iPhones are not safer. After analysing how 1400 iPhone apps dealt with user data, the team discovered that over half of the sampled applications collected the phone’s ID - a code unique to each iPhone. Fortunately for Apple, they also found that only a small fraction of the sample actually violated user privacy in more serious ways. Yet, one of the more interesting conclusions was that apps downloaded from the Apple App Store were more likely to access user data without requesting authorisation than those downloaded from the unofficial Cydia store, which is only accessible through jailbroken devices. Such results could discredit Apple’s line of defense regarding malware and iPhones, especially if confirmed on a larger sample.
Google’s Android phone, the darling of consumer reports that is expected to lead mobile phone sales in 2011, relies on users to report malware. Hailed for its openness and laissez-faire approach to app development and sales, Google may have to reconsider its policies. While Viruses are still far from a common occurrence on phones, they may become more frequent in the future. Luckily for users some of the most alarming malware is coming from controlled environments. A recent collaboration between researchers at the University of Indiana and Hong Kong City University led to the development of Soundminer, a new and alarming type of malware. Undetected by two major anti-viruses, Soundminer was able to detect important pieces of data such as credit card numbers and transmit them back to a third party device. If doctoral students have come to these conclusions, hackers are not far behind. As more viruses affect Android phones, Google may soon face some heated criticism from consumers.
Antivirus companies are already jumping on the bandwagon and advertising their products specially developed for jailbroken iPhones and Androids. Some internet commentators have already pointed out that much of the virus paranoia may in fact be fueled by firms that offer antivirus software. It is true that much of the data on the subject is provided by companies working in the sector, such as McAfee. There is a clear incentive for these companies to exaggerate the danger to users, but they are also savvy in the field.
The extent to which malware and viruses will affect the market for smartphones remains to be seen. The possibility that it becomes a serious concern exists, but at the moment awareness among consumers is very limited. In the long-term, a growing threat could give rise to a system of defense similar to that used for PCs. In addition to antiviruses, providers of phone applications may exert more active control on the quality of their products. As users wait to see how viruses develop, taking precautions and avoiding transmitting highly sensitive data through smartphones or downloading unreliable applications are good moves. Smartphones may be the future, but currently they are still a work in progress.




