Android Warning

Never Mind the Windows 10 EOL support ending… A new report reveals a significant security risk for a staggering 750 million Android users worldwide. These users are running outdated versions of the Android operating system, making them highly vulnerable to spyware and other malware attacks.

​The Threat:
Cybersecurity firm Lookout has released a threat report which paints a concerning picture for Android. While some reports focus on phishing threats on iOS, Lookout found that Android devices are facing a greater risk from spyware and other malware. Five of the seven most critical threat families identified were spyware, and the number of malicious apps detected on enterprise Android devices has increased by almost 33% in just one quarter.

---

Why are so many at risk?
The fragmented nature of the Android ecosystem is a major contributing factor. Unlike Apple, which controls both hardware and software updates for iPhones, Android updates are dependent on various manufacturers, models, regions, and carriers. This leads to many devices running older, unsupported versions of Android.
According to StatCounter, a quarter of all Android phones are running Android 11 or 12, while 10% are even older, running Android 9 or 10. Google has ended support for these older versions, meaning they no longer receive critical security updates, leaving them open to exploitation.

Google Takes Action:
Recognizing this critical issue, Google is stepping up its efforts to improve Android security. Starting in 2025, the Play Integrity API will be ramped up for devices running Android 13 and above. This will make it significantly harder for attackers to bypass security measures and distribute malware.
Furthermore, Google is tightening its policies on spyware. This will likely lead to banking, enterprise, and other sensitive apps ceasing to function or having restricted functionality on older Android versions. These changes will become mandatory in May.

The Message is Clear:
If you're using an Android phone running Android 11 or older, it's crucial to upgrade your device to a supported version as soon as possible. These older versions are increasingly vulnerable to attack, putting your personal data and potentially your employer's data at risk. The upcoming changes from Google will also make these older devices less functional. The time to act is now.

Lookout is a leading cybersecurity company specializing in protecting mobile devices and data.

Ep279

Image source: Pixabay with thanks to Wilson Nantes