Antivirus experts disagree with Chris DiBona, Google's open-source programs manager, who recently said that there is no virus problem on the Android platform and that companies selling anti-malware software for mobile operating systems are charlatans.
"Yes, virus companies are playing on your fears to try to sell you BS protection software for Android, RIM, and iOS," DiBona said in a post on Google+. "They are charlatans and scammers. If you work for a company selling virus protection for Android, RIM, or iOS you should be ashamed of yourself," he added.
[ McAfee says that Android is the sole target of all new mobile malware. | Keep up on key mobile developments and insights via Twitter and with the Mobile Edge blog and Mobilize newsletter | Learn how to secure your systems with InfoWorld's Malware Deep Dive PDF special report and Security Central newsletter, both from InfoWorld. ]
According to DiBona, none of the major smartphone operating systems has a virus problem that is similar to what the Windows and Mac ecosystems experience.
The open-source advocate, who manages Google's developer outreach programs and oversees the company's license compliance practices, dismissed the Android threats reported by the security industry until now as little things that didn't get very far because of the platform's sandbox model and other architectural features.
Security experts disagree with this assessment and point out that the levels of Android malware have registered a huge increase this year.
"Today malware for Android devices is one of the biggest issues in [the] mobile malware area," said Denis Maslennikov, a senior malware analyst at Kaspersky Lab, in an email interview. "The growth of numbers of malware for Android is significant in [the] last 5 months. In June we've discovered 112 modifications of Android malware, in July - 212; August - 161; 559 in September; 808 in October," he added.
A similar trend was observed by other antivirus vendors, with Trend Micro reporting a 1410 percent increase in the number of Android threats from January to July 2011. "The more important figure is not the total number of malware, but the rate of increase of that malware quarter on quarter and year on year. That demonstrates current, active, and sustained criminal interest in the mobile platform," said Rik Ferguson, the company's director of security research and communication.
The majority of Android malware threats consist of Trojans, not traditional self-replicating viruses or worms. However, these can be just as damaging if not even more so, the security experts said.
"It depends on your definition of 'damaging.' Is it recording and uploading voice conversations to a remote server, is it stealing email and text message histories, or is it running up huge bills through premium-rate text and voice scams? I guess it all depends on the point of view of the victim and the fallout of infection," Ferguson said.
However, the security issues on the Android platform are not limited to malware alone. Like any computer users who access email, websites, and other common services, smartphone owners are vulnerable to platform-independent threats like phishing or advance-fee scams.