Smart Home Automation


The dark side of apps

1 September 2019 Smart Home Automation Information Security

Mobile device security threats are on the rise and it’s not hard to see why. In 2019 the number of worldwide mobile phone users is forecast to reach 4.68 billion, of which 2.7 billion are smartphone users. So, if you are looking for a target, it certainly makes sense to go where the numbers are.

Think about it, unsecured Wi-Fi connections, network spoofing, phishing attacks, ransomware, spyware and improper session handling – mobile devices make for the perfect easy target. In fact, according to Kaspersky, mobile apps are often the cause of unintentional data leakage.

“Apps pose a real problem for mobile users, who give them sweeping permissions, but don’t always check security,” says Riaan Badenhorst, general manager for Kaspersky in Africa. “These are typically free apps found in official app stores that perform as advertised, but also send personal - and potentially corporate data to a remote server, where it is mined by advertisers or even cybercriminals. Data leakage can also happen through hostile enterprise-signed mobile apps. Here, mobile malware uses distribution code native to popular mobile operating systems like iOS and Android to spread valuable data across corporate networks without raising red flags.”

In fact, according to recent reports, six Android apps that were downloaded a staggering 90 million times from the Google Play Store were found to have been loaded with the PreAMo malware, while another recent threat saw 50 malware-filled apps on the Google Play Store infect over 30 million Android devices. Surveillance malware was also loaded onto fake versions of Android apps such as Evernote, Google Play and Skype.

Considering that as of 2019, Android users were able to choose between 2.46 million apps, while Apple users have almost 1.96 million app options to select from, and that the average person has 60-90 apps installed on their phone, using around 30 of them each month and launching 9 per day – it’s easy to see how viral apps take several social media channels by storm.

“In this age where users jump onto a bandwagon because it’s fun or trendy, the Fear of Missing Out (FOMO) can overshadow basic security habits – like being vigilant on granting app permissions,” says Bethwel Opil, enterprise sales manager at Kaspersky in Africa. “In fact, accordingly to a previous Kaspersky study, the majority (63%) of consumers do not read license agreements and 43% just tick all privacy permissions when they are installing new apps on their phone. And this is exactly where the danger lies – as there is certainly ‘no harm’ in joining online challenges or installing new apps.”

However, it is dangerous when users just grant these apps limitless permissions into their contacts, photos, private messages, and more. “Doing so allows the app makers possible, and even legal, access to what should remain confidential data. When this sensitive data is hacked or misused, a viral app can turn a source into a loophole which hackers can exploit to spread malicious viruses or ransomware,” adds Badenhorst.

As such, online users should always have their thinking caps on and be more careful when it comes to the internet and their app habits including:

•Only download apps from trusted sources. Read the reviews and ratings of the apps as well.

•Select apps you wish to install on your devices wisely.

•Read the license agreement carefully.

•Pay attention to the list of permissions your apps are requesting. Only give apps permissions they absolutely insist on, and forgo any programme that asks for more than necessary.

•Avoid simply clicking “next” during an app installation.

•For an additional security layer, be sure to have a security solution installed on your device.

“While the app market shows no signs of slowing down, it is changing. Consumers download the apps they love on their devices which in turn gives them access to content that is relevant and useful. The future of apps will be in real-world attribution, influenced by local content and this type of tailored in-app experience will lead consumers to share their data more willing in a trusted, premium app environment in exchange for more personalised experiences. But until then, proceed with caution,” concludes Opil.




Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Now barcode scanners pose a cyber risk for warehouses
Integrated Solutions Information Security Logistics (Industry)
Modern warehouses are more than simple storage spaces; they are complex ecosystems built on multiple technologies and devices. Kaspersky discovered a new cyberattack vector in a widely used barcode scanner that could expose supply chains.

Read more...
The US $1,5 million scam that never looked like a scam
News & Events Information Security
Attackers compromised a company’s Microsoft 365, quietly took control of the conversation and let the firm authorise fake payments itself. By the time anyone realised, a US$ 1,5 million cryptocurrency investment had already disappeared.

Read more...
You can do everything right and still get breached
Editor's Choice Information Security AI & Data Analytics
A particularly nasty truth sits at the centre of cybersecurity in 2026. You can do everything right and still lose if the organisation holding your identity number, banking information, medical history, or biometric data gets breached.

Read more...
Paxton officially launches PaxLock Pro2
Paxton News & Events Access Control & Identity Management Products & Solutions Smart Home Automation
Paxton’s wireless access-controlled door handle is engineered to withstand the most demanding environments, while maintaining a sleek, contemporary design. It includes a new Privacy Button, and offers up to 55 000 operations on a single set of batteries.

Read more...
Seeing a breach is one thing, but stopping it is another
BlueVision Editor's Choice Information Security Security Services & Risk Management
Spending business budgets on breach alerts without the wherewithal to stop them is essentially an investment in expensive noise says Christo Coetzer, managing director of BlueVision.

Read more...
Why your cloud journey must start with a gear lock mindset
Infrastructure Information Security
Many business leaders fall into a false sense of security, assuming that because they are using a world-class cloud services provider, their data security is automatically bulletproof. This is a dangerous misconception.

Read more...
Visibility, governance and process transformation
Editor's Choice Information Security Asset Management
South African organisations continue to invest heavily in digital transformation initiatives, but for many, the challenge is no longer adopting new technologies. Instead, the challenge is ensuring existing systems, applications, and data sources work together effectively.

Read more...
Security has an identity problem
Access Control & Identity Management Information Security
Cybersecurity discussions have mainly focused on defence, including stronger firewalls, tighter network controls, and better endpoint security. However, in today's world, those traditional defences have become less relevant.

Read more...
Modernising ‘smart’ ports
IoT & Automation Information Security Transport (Industry) Logistics (Industry)
A modern port is part of a much larger digital trade ecosystem where all systems need to work together. If one part of that ecosystem is disrupted, the impact can quickly move through the supply chain.

Read more...
Reinventing cybersecurity
NEC XON News & Events Information Security Commercial (Industry)
NEC XON helps a workforce solutions leader reinvent cybersecurity with an AI-enhanced XDR solution to keep pace with increasingly devious cyberattack techniques, including fileless malware, lateral movement, and credential misuse.

Read more...









While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd | All Rights Reserved