Vulnerable and malicious Android apps

There have been several stories this week highlighting issues with Android apps:

Compromised Android keys used to sign info-stealing malware • The Register

Android malware apps with 2 million installs spotted on Google Play (bleepingcomputer.com)

New ‘Zombinder’ platform binds Android malware with legitimate apps (bleepingcomputer.com)

I have written about the lack of curation in the Google Play Store.

Fake Android app spotted by users but it still has a rating of 3.4 in the Google Play Store

If you use Android devices in your organisation you should have some policies and procedures to address these issues with Android app security.

Clive Catton MSc (Cyber Security) – by-line and other articles

My advice: Either you or your IT support need to check whether these issues impact your systems. You need to have a master document that details your systems, hardware, software, online, networks, back-ups, suppliers etc – so when cyber security (or operational) issues arise you and your support teams can quickly check if you are affected. From there you can take fast, effective action.