“Genius is one percent inspiration and ninety–nine percent perspiration.”

– Thomas A. Edison

---

Android malware SandroRAT disguised as mobile security app http://www.scmagazine.com/android-malware-sandrorat-disguised-as-mobile-security-app/article/364455/

Article Resources

McAfee Blog Post

http://blogs.mcafee.com/mcafee-labs/sandrorat-android-rat-targeting-polish-banking-users-via-e-mail-phishing

Emory Libraries Information Security Awareness covering Phishing

http://it.emory.edu/security/security_awareness/phishing.html

---

Most Top Free and Paid Mobile Apps Pose Threat to Enterprises: Report https://www.securityweek.com/most-top-free-and-paid-mobile-apps-pose-threat-enterprises-report

C-IT Recommendation

1. Perform an asset inventory of all company owned Android devices using company provided cell phone service. Your company should have a configuration management database to show which devices have which operating systems versions.
2. Ensure anti-malware service is deployed on all company owned Android devices. If you have a mobile device management solution, enable the company webfiltering option where applicable and force the cellular devices to pass through the company webfilter/proxy before accessing the internet.
3. Provide mobile device security awareness informing your employees not to visit malicious sites. Also, instruct employees not to apps from unofficial stores.

If you do not have a mobile device management solution in a BYOD model, Strongly recommend users to install the security updates. Failure to do so may result in your employees devices compromising your company information and/or costing the employees or your organization a ton of money

Article Resources

Appthority App Reputation Report

https://www.appthority.com/app-reputation-report/report/AppReputationReportSummer14.pdf

US CERT Security Tip Cybersecurity for Electronic Devices

https://www.us-cert.gov/ncas/tips/ST05-017