Wireless and Mobile Device Security, 2nd Edition

Mobile Application Attacks

The various mobile application security exploits generally result from one of two main causes:

• Malicious unnecessary functionality—This refers to mobile code that is both unwanted and dangerous. With malicious unnecessary functionality, users think they are downloading an application or game for a specific purpose, unaware that it comes loaded with spyware, adware, links to phishing sites, or the ability to secretly handle premium SMS messages. Malicious unnecessary functionality might include monitoring activity on the device, data theft, the unauthorized sending of premium SMS text messages or emails, the unauthorized dialing of the phone, unauthorized network connectivity, and system modifications such as jailbreaks, ...