Page 43 - Cyber Warnings

1. Update your device’s operating system to the latest version as soon as an update
becomes available.
2. Do not click on any dialog boxes that pop up on your phone unless you are sure about
the action that caused them to appear and the results are desirable.
3. Do not install applications from third-party app stores if you have a choice. Sometimes it
is not an option, but there is an Android setting to block third-party app installation.
a. Open the “Settings” app.
b. Navigate to “Security” settings.
c. Uncheck “Unknown sources”.
4. Check for apps that utilize accessibility permissions on your device and turn this option
off if you don’t recall turning it on or if you do not require that functionality.
a. Open the “Settings” app.
b. Navigate to “Accessibility” settings
c. Make sure there is either no group named “Services” or the group has no
enabled entries.
5. Download a mobile threat defense app to protect your device for any existing and future
malicious applications.
a. Look for a solution that persistently detects threats across all mobile attack
vectors, including malware, and takes proactive steps to protect your device.
b. Note that Accessibility Clickjacking exploits are currently only detectable by
Skycure.

About The Author

Yair Amit is the CTO and co-founder of Skycure, leading the company’s
research and vision and overseeing its R&D center. Yair has been
active in the security industry for more than a decade with his research
regularly covered by media outlets and presented in security
conferences around the world.

Prior to co-founding Skycure, Yair managed the Application Security and
Research Group at IBM, joining through the acquisition of Watchfire. At
IBM, Yair led the research and implementation of IBM’s next-generation application security
technology. Yair holds a BSc, summa cum laude, from Tel Aviv University in bioinformatics.

Yair can be followed on Twitter (@yairamit) and at http://www.skycure.com/

43 Cyber Warnings E-Magazine – June 2016 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide