This shouldn’t surprise anyone, Android is the top mobile malware target in the market and it wasn’t close.  79 percent of all mobile threats in 2012 had Android dead in its sights.  That finding published by Public Intelligence and the Department of Homeland Security’s Cyber Intelligence Analysis Division also indicates that mobile malware poses a threat to security personnel and emergency responders that are increasingly dependent on mobile devices in the conduct of their duties.  The report also points out how much diversity there is in base Android versions out there, a problem known as fragmentation.  That fragmentation is an issue because of a couple of reasons: first, updates become less frequent and eventually stop for older Android versions.  Once a phone gets to a certain age point, the Android version is not something that is not typically upgradeable.  Many according to the report are running Android 2.3 Gingerbread, a version that is known for being particularly vulnerable to attacks.  The report recommends to run a security app to at least have some protection from malware and vulnerabilities.   It also recommends to patch and update to the latest versions of Android if possible.

Android of course commands an overwhelming lead in smartphone operating system dominance that runs the spectrum from high end smartphone offerings to budget type of phones at the lower end.  This is a worldwide trend that attracts unwanted malware attention to the platform.  Much as desktop Windows operating systems have been the primary and most valuable target for malware, Android has filled in that same role in the mobile arena.  By the same token, this does not mean other mobile operating systems are free from vulnerabilities or attack, please don’t walk away with that message.  iOS has vulnerabilities and security problems as does BlackBerry 10, as does Windows Mobile and that’s just the facts – threats can come from anywhere at any time.  Perhaps this should be in bold, but take note – there is no operating system, desktop or mobile, that is 100% safe from malware or other vulnerabilities – so everyone’s really on the list.  This is especially important to consider if you believe you’re some kind of target on any level.   It’s great that this report has been put together, but the headlines coming out of the report focus on the wrong thing.  Mobile security is a vigilance issue as threats are truthfully across the board, it’s just that right now the current mobile scene says Android is the biggest target.

Organizations should at a minimum be deploying some kind of Mobile Device Management suite in place as a first step to mobile security.  That ideally is a launching pad to better security elements that can be integrated into the picture, including enterprise malware capabilities, encryption, securing business applications and so on.  If you’re not a business however, the question may be what to do to protect your smartphone.  First off, update your phones operating system with patches and OS updates whenever they become available.  Avoid apps you don’t know well from sources you probably shouldn’t trust.  And run some type of security app.  Many of today’s security apps can back things up, wipe your phone remotely, locate your phone if lost or stolen, and do a number of things that go way beyond just endpoint security.