Android banking malware is still a problem

If you or anyone in your team use an Android based device then these two articles are a must read:

Android-wiping BRATA malware is evolving into a persistent threat (bleepingcomputer.com)

New Android banking malware disguises as crypto app to spread | TechRepublic

Apple comes under a lot of criticism for it’s “walled garden” approach to it’s app store, but the degree of control and approval they apply to the available apps does give the user extra confidence the apps they download are safe. Ans I know from time to time something does slip through.

The Google Android app store has less control – even though Google is working on building confidence.

I really like this – more transparency in the Google Play Store and the way apps will use your personal information – Smart Thinking Solutions

Will this be a more strict Google Play store – Smart Thinking Solutions

Then there is side loading apps – the ability to set an Android device to accept and download apps from anywhere – that is a real cyber security nightmare. (Make sure your BYOD policies and procedures state that side loading is prohibited.)

So malicious apps that are disguised as something else you may be tempted to download, or apps that exfiltrate private information from the device, that are available in the Google Play Store pose a really cyber security threat to any Android user. For our cyber security clients we are suggesting approved apps lists on BYOD devices – better still issue company devices.