Mobile Malvertising is Becoming a Lucrative Business

If there is any doubt that creating and distributing malware is a business and can be quite profitable, hear this: One malware writer has recently raised prices for his product from $5K to $15K. Yes, that’s fifteen thousand U.S. Dollars, and this is in addition to a monthly service fee. What does he or she supply? It’s malware that helps cyber thieves steal passwords and login information from unsuspecting mobile users.

The biggest group now being targeted is no longer sitting at PCs, but one that uses mobile devices. While phishing using text and SMS, as well as email is still a common way to get malware onto these devices, there is now a surge in malware that lands on your mobile devices via application overlays and advertising.

Overlays are fake front ends to popular apps, including games.  However, banking apps are big targets for these. They usually end up on the device because a user has been tricked into downloading them from sites that are not the official app stores (called sideloading). Then they launch and entice users to enter credentials for banking, social media, or other apps that are then sent on to attackers.

That’s not all, however. These overlays have also made their way to Google’s AdSense network and appear on the sides or tops or anywhere else you may see when browsing the web. Sometimes, the user doesn’t even have to click them, but merely land on a site that includes one, even if just for a second (called a drive-by infection) and the malware gets downloaded.

Using ad blocking software may help protect against these types of malware. Ad blockers simply block the ads from appearing on the page. This prevents even accidental clicking. There are many options available, so do research, read reviews and get the best one that fits your situation. Remember not to sideload, but to get all of your apps from the official store for your device.

In addition, always keep your devices up-to-date with the latest critical and security patches for whichever device you’re using. While this won’t guarantee your smartphone or tablet won’t get an infection, it will help prevent outdated ones from being vulnerable to known issues.

Unfortunately, because it is easier to sideload apps on Android devices due to the availability and larger user base, hackers often focus on users of these rather than iOS. However, malware has been found in both Apple and Google stores and in Blackberry World. None are 100% safe. That’s why it’s up to users to be aware and use good judgment with mobile devices, as they would for a desktop or laptop.