Security, viruses and phishing

Historically carried over from the old PC world, a “virus” is a program that replicates itself by attaching to another program.  Virus has become a popular term to refer to all types of malicious software (malware) on computers. In the case of smartphones and tablets, in general, malware that replicate itself like a PC virus can, and specifically on Android devices does not exist, so technically there are no Android viruses. However, there are many other types of Android malware. Most people think of any malicious software as a virus, even though it is technically inaccurate.

Malware, short for malicious software, is software designed to secretly control a device, steal private information or money from the device’s owner. Malware has been used to steal passwords and account numbers from mobile phones, put false charges on user accounts and even track a user’s location and activity without their knowledge.

Phishing is the fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers.

There is currently a very plausible and sophisticated phishing system which focuses on gmail accounts.

There are a number of general security principles which can be applied to an android (and often many other) device.  Some are just common sense.

1. Secure Android: Screen lock

Setting up a screen lock is the simplest way to protect Android when your phone or tablet falls into the wrong hands. These days you can set a PIN lock, pattern lock, password lock and, if your device supports it, a fingerprint or eye scanner lock. It’s so easy to do you really have no excuse. Head to Settings > Security > Screen lock to get started.

2. Secure Android: Lock individual apps & media

You can add an extra layer of protection to your apps by locking down those you really wouldn’t want to get into the wrong hands with an app such as App Lock.

3. Secure Android: Keep the OS & apps up-to-date

Android- and app updates don’t just bring new features, but also bug fixes and patches to security vulnerabilities. You should ensure your apps are set to auto-update over Wi-Fi in Google Play’s Settings > General > Auto-update apps menu or go to Google Play Store, menu, my apps, update all.

4. Secure Android: Don’t download apps outside Google Play

By default your Android phone or tablet won’t let you sideload apps from anywhere other than the Google Play store, but it’s easy to get around this in Settings > Security > Device Administration > Unknown sources. Google has no control over apps outside its app store, so only those who really know what they’re doing should even think about sideloading, and doing so only from trusted sources.

5. Secure Android: Set up user accounts

Since Android Lollipop it’s been possible to set up multiple user accounts on tablets, and more recently on phones. If you are going to be sharing your device with another family member, a colleague or a friend, you can give them access to only the parts of your Android that you are willing to let them see. Set up user accounts in Settings > Users > Add User.

6. Secure Android: Be careful what information you share

We’ve often complained that people are sharing too much information on social media, such as publicising the fact they are going abroad for a week on Facebook and leaving their home vulnerable to burglars (don’t do that), but with Android you may find you’re sharing too much information with yourself.

Android uses the Chrome browser, which you may well also be using on your laptop or desktop PC. The ability to sync your bookmarks, passwords and more through a Google account (which is also tied and automatically logged into your email- and other Google accounts) is an awesome timesaver, but it could become an issue should you lose your phone or tablet or it gets into the wrong hands. All your logins, passwords and sensitive data within your emails will be available to whoever finds your Android device and knows where to look for that stuff.

7. Secure Android: Set up remote tracking & wiping

Android Device Manager is an excellent tool for tracking down and, if necessary, wiping a lost or stolen Android phone or tablet. It’s a free app for your phone or tablet from Google Play, but can also be accessed on any web browser in which you are signed into a Google account.

8. Secure Android: Consider device insurance

Following on from the last tip, should your phone or tablet go walkies you don’t want to find yourself out of pocket. Given that some devices can cost over £600, it’s worth considering device insurance if losing your phone is something you tend to be rather good at.

9. Secure Android: Back up Android

It’s not just the fact that our data might get into the wrong hands when our device is lost or stolen that it worrying – it’s also the fact it will no longer be in our hands. Backing up Android is essential, and in doing so you can tie everything to your Google account rather than a piece of hardware that could break at any point. Backing up Android also means things such as your photos and videos are accessible through any web browser signed into your Google account, and that next time you buy a new phone you won’t have to manually download and install all your favourite apps. Often the word sync(hronising) is often used for this as well.

10. Secure Android: Dealing with Android viruses and malware

Android viruses are few and far between, and you’re more likely to find yourself in trouble by clicking on a dodgy link in Gmail or a text message and giving away too much personal information than you are to download a dodgy app. But it is possible. Some people like to install an antivirus app such as Lookout, Avast or AVG Free, but we’re not yet at the point where that is strictly necessary and usually all you need do to avoid Android viruses is to stick to downloading apps only from Google Play.

11. Secure Android: Use secure Wi-Fi

Smartphones and tablets are mobile devices, which means we are as likely to use them in a cafe or pub as we are our own homes. Provided free Wi-Fi is available, of course. Just don’t fall into the trap of jumping on to an unsecured wireless network just so you can take advantage of a free internet connection when out and about – whoever is providing that ‘free’ internet connection may be taking a great deal more from you in return.

No comments yet.

Leave a Reply