Security for Android Smartphones- Developing...

I am working on this blog entry for my spring Furman Olli course on home and small business security.  It is obviously incomplete, but I thought I should publish it now and due to the serious nature of the problem discussed in the following section.  I'll continue to work on the page.

What is Developing:  

The Android "Gooligan" hack.  ( https://thehackernews.com/2016/11/hack-google-account.html, and http://www.forbes.com/sites/thomasbrewster/2016/11/30/gooligan-android-malware-1m-google-account-breaches-check-point-finds/#6158e8d0470d, among others). This is malware that provides access to all Google apps, including GMail, GSuite, Google Drive, Google Photos, etc:  a critical problem.  The referenced thehackernews link provides an overview.  How do you get it?  The usual way malware is inserted today:  the user installs 3rd party software from a 3rd party (not trusted) store or the user clicks on a link in an email or on a hacked (or intentionally constructed) web page.  From the thehackernews article:

Check Point has published an online tool to check if your Android device has been infected with the Gooligan malware. Just open ‘Gooligan Checker’ and enter your Google email address to find out if you've been hacked.

If you found yourself infected, Adrian Ludwig, Google's director of Android security, has recommended you to run a clean installation of the operating system on your Android device.
This process is called 'Flashing,' which is quite a complicated process. So, the company recommends you to power off your device and approach a certified technician or your mobile service provider in order to re-flash your device.  

I've used the Gooligan Checker (https://gooligan.checkpoint.com/) and it is legit, although, from the methodology, it probably isn't definitive, since it uses your email address to check.

Security for android includes the following topics:

• Malware
• Phone loss
• Identity Loss (2 factor)
• Stealing information in real time (privacy protection)
• Pop Up Ads 

Tools for Malware

• Malwarebytes, Android version- the old standby for malware- free
• CCleaner, Android version- the old standby to clean your smartphone of unnecessary files, which picks up malware- free
• Lookout Security and Antivirus (Suite)- This was developed for smartphones.  I've used it since it was released and have no complaints- free and low cost versions
• Norton, mobile version- free
• Kaspersky mobile version- free
• Avast Mobile Security
• 360 Security- this is top rated, but its advertising methodology of pop up ads suggests it is borderline nefarious 

In general, go to the Google Play store and type in "Security."  You can also search for "best antimalware" or "best antivirus"

Tools for Phone Loss

• Android
• Lookout Security- this is a component of the Lookout Suite
• Lastpass password manager

Tools for Privacy Protection

Tools for Popup Ads With Security Warnings