FBI warns vs new Android malware

Published October 16, 2012 10:50am

Owners of smartphones running Google's Android operating system were warned over the weekend against a new malware posing as a work-at-home ad.

The warning came from no less than the Federal Bureau of Investigation (FBI), which said the ad promises a lucrative payday in exchange for just sending out an email.

"A link within the advertisement goes to a website that pushes Loozfon to the victim’s mobile device, where the malicious application then steals the number of the infected phone as well as contact details from the user’s address book," it said of the malware dubbed "Loozfon."

On the other hand, the FBI also warned against a second malware, "FinFisher."

It said "FinFisher" is spyware that can easily be transmitted to a smartphone when the user visits a specific link or opens a text message masquerading as a system update.

"Once installed, the phone can be remotely controlled and targeted regardless of the location of the owner," it said.

An article on The Hacker News noted the FBI has given safety tips to protect a mobile device:

When buying a smartphone, know the features of the device, including the default settings. Turn off features that are not needed.
Depending on the type of phone, the operating system may have encryption available. This can be used to protect the user’s personal data in the case of loss or theft.
With the growth of the application market for mobile devices, users should look at the reviews of the developer/company who published the application.
Review and understand the permissions you are giving apps when you download them.
Passcode protect your mobile device. This is the first layer of physical security to protect the contents of the device. Also enable the screen lock feature after a few minutes of inactivity.
Obtain malware protection for your mobile device. Look for applications that specialize in antivirus or file integrity that helps protect your device from rogue applications and malware.
Be aware of applications that enable Geo-location. The application will track the user’s location anywhere.
Jailbreak or rooting allows the user nearly unregulated control over what programs can be installed and how the device can be used.
Do not allow your device to connect to unknown wireless networks. These networks could be rogue access points that capture information.
If you decide to sell your device or trade it in, make sure you wipe the device (reset it to factory default) to avoid leaving personal data on the device.
Update smartphones' applications and firmware.
Avoid clicking on or otherwise downloading software or links from unknown sources.