Do smartphones need virus protection?

Android is known as the “open” platform because it gives more control to users and phone makers than they see on iPhone. According to Symantec, Android’s openness also exposes users to more risk. Users are increasingly becoming victims of Trojans, which are apps that trick users into installing for legitimate reasons and then gain control of a phone or steal user data. These apps typically pretend to be well-known programs and spread through third-party app stores.

Security companies routinely float stories about dangerous viruses lurking in the shadows, ready to pounce on unsuspecting computer users with their guards down. At the end of these studies and reports, you’ll often find words along the lines of, “By the way, we sell the software that will protect your from computer viruses.” However self-serving these reports may seem, they often act as reminders that there are real threats out there and people need to monitor them.

Take the important line from Symantec’s report:

“Android Trojans [are] spreading via altered versions of legitimate apps hosted on unregulated third-party Android marketplaces.”

“Unregulated third-party” is the key phrase to process. These apps are infecting phones because they operate outside of the Android Market, which is the official app store for Android that is monitored by Google and users. Malicious programs are often removed when discovered, but third-party sources often lack the manpower or resources to weed out trojans as quickly or efficiently as Google. Someone downloading from the official market is far less at risk for a phone-based attack.

Of course, “far-less” is not exactly the same as completely safe. The Android Market is set-up so that apps become available the instant developers push “Publish”. There’s still time for someone to unexpectedly download a malicious app, so there are a few ways to protect yourself.

• Read the permissions page for clues about suspicious apps. Android lists every feature that apps want to access before they are installed, so a chess game asking for SMS permissions is cause for concern.
• Avoid installing apps from anywhere but trusted sources. Download directly from the Android Market app whenever possible, avoid pirated software websites, and don’t click on install links from your SMS or email messages.
• Consider getting an anti-virus system. AVG, Lookout, Symantec, and other security companies offer applications that will scan apps for inappropriate permissions and compares them against a list of known viruses. These apps typically cost money and not are not necessary if you follow the first two steps, but they can provide an additional measure of security if you or someone you know may be careless about their install habits.

A full-fledged smartphone anti-virus app is not be necessary for everyone. It is a good idea to be cautious when venturing outside the confines of your app store, so be careful and mindful of every action taken.