Protect your Android from attack

ESET recently discovered the Simplelocker Trojan, the first case of ransomware that encrypts files held by Android devices. Here are some guidelines on how to prevent yourself from becoming a victim.

A Trojan, named Simplelocker, scans the SD care for certain file types, encrypts them, and demands a ransom in order to decrypt the files. Types of files that could be encrypted include jpeg and gif images, dot and txt files, and mkv, avi and mp4 media.

Simplelocker, at present, seems to be a proof-of-concept rather than a fully-fledged attack ready for mass release, however smartphone users should be cautious of installing software from sources other than the operating system-provided application store, and should protect themselves against threats using defensive measures. For example, a mobile security app such as ESET Mobile Security for Android will keep malware off your device.

There is an increase on serious threats targeting Android devices,” says Carey van Vlaanderen, CEO of ESET Southern Africa, ‚Äòand the trend is predicted to continue in 2014.

1. Don’t assume you are safe on Android

Links, downloads and attachments are just as risky on Android as they are on PC, and while it is easy to assume that opening emails on Android is less risky than on a PC, phishers may direct users to a website on their device where they are wanting to obtain information.

2. Steer clear of old Androids (if possible)

Older versions of Android are less secure. The biggest problem for consumers is the number of old phones running Android that are still in use, and operators will not release new versions. This means that old phones are outdated and vulnerable to attacks.

3. Lock your phone

It simple, but many users don’t take advantage of this very basic security measure. Locking your phone is one measure to assist in preventing attacks on your device. There’s no excuse, if you have the option to lock your phone, do so!

4. Do not keep sensitive information stored on your phone

Avoid saving any private, sensitive information on your device, whether this is a passport photo or credit card information – anything that pertains to you and your identity could be of significant uses to a cybercriminal.

5. Inspect every apps permission

Permissions such as “full network access” or ability to receive SMS should make you think twice about installing the app. It does not necessarily mean that the app is malicious, but when attached to a screensaver, clock or another app which has no logical reason to need to communicate abilities, this should be a warning.

6. Never pay for ransomware

Under no circumstances should you ever pay up. Paying is a motivation for criminals to continue with attacks. There is also no guarantee that they will decrypt your device.

* Follow Gadget on Twitter on @GadgetZA