{"id":41466,"date":"2015-02-23T21:00:08","date_gmt":"2015-02-24T05:00:08","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=41466"},"modified":"2025-08-31T22:54:09","modified_gmt":"2025-09-01T05:54:09","slug":"february-2015-threats-report","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/february-2015-threats-report\/","title":{"rendered":"Ransomware, PUPs, Vulnerabilities: a Look at What\u2019s Putting You at Risk"},"content":{"rendered":"

Every quarter McAfee\u00a0 releases a report on the cybersecurity issues confronting consumers, business partners, and the public. Produced by McAfee Labs, the McAfee Labs Threats Report<\/em> covers threats to both mobile and desktop devices. But, as you\u2019ll soon see, the distinction between mobile and desktop threats is slowly becoming irrelevant thanks to three key issues: potentially unwanted programs (PUPs), ransomware,<\/a> and unpatched app vulnerabilities. Let\u2019s take a quick dive into these areas and learn how you can protect yourself from each threat.<\/p>\n

Potentially Unwanted Programs<\/strong><\/h2>\n

The first threat, PUPs, revolves around apps and programs that change system settings and gather personal information without a user\u2019s knowledge. Although this sounds inherently malicious, not all PUPs are bad. They reside in a tricky \u201cgray zone\u201d in which developers sometimes have reasonable justifications for their behavior and sometimes do not. But the basic issue remains the same regardless of intentions: PUPs modify system settings, browser settings, covertly collect user information, and go to lengths to disguise their presence. What you need to know is that your latest program or application may be collecting more information about you than you expected.<\/p>\n

For mobile devices, PUPs usually take the form of knock-off apps. That is, they emulate and piggyback on the appearance and purpose of legitimate, popular apps while gaining permissions and collecting data on your activities. Often, they try to push you to other services or, in some cases, install software that directs your device towards ads<\/a> based on your browsing history.<\/p>\n

Because of their ambiguous nature, PUPs are becoming a troubling area for the cybersecurity community. They\u2019re difficult to define and analyze. But for consumers like you, there are a few things you can do. The first is to keep an eye out for suspicious programs that are almost, but not quite, like a well-known and popular application. For desktop and laptop computers, you should avoid both app packages and third-party app stores.<\/p>\n

Ransomware<\/strong><\/h2>\n

Ransomware, the report\u2019s second topic area, has been an area of concern for some time. While ransomware\u2014malicious programs that restrict access to your files and programs until a ransom is paid\u2014 fell in the third quarter of 2014, the threat experienced resurgence last quarter, when the number of new ransomware samples grew by 155%. That means there are more than two million ransomware samples in the world right now. It also means that more people are at risk of losing access to their devices and data than ever before.<\/p>\n

Unlike other malicious programs, ransomware, once installed, is quite obvious. Your device, be it a laptop, desktop or mobile phone, will show a pop-up that notifies you of blocked access. In order to regain access to your device, documents, or both, the ransomware will then demand a\u2014you guessed it\u2014ransom. Do not give in to this request.<\/p>\n

You can avoid falling victim to ransomware programs by using a comprehensive security solution like McAfee LiveSafe\u2122<\/a> service and avoiding suspicious files and apps. You can also avoid paying ransom for your files by keeping backups of your documents on a cloud backup service or on a hard drive that isn\u2019t connected to your computer. For your mobile devices, keeping a clean backup helps, as does limiting what permissions your apps have access to.<\/p>\n

Mobile Vulnerabilities Go Unaddressed<\/strong><\/h2>\n

The final highlight from McAfee Labs, vulnerabilities on mobile devices<\/a>, have been in the limelight for some time. But in Q4, the topic grew more complex: Along with a 14% growth in the number of mobile malware<\/a> samples in the wild, we\u2019re also seeing app developers ignoring known vulnerabilities when securing their app communications. They\u2019re releasing and maintaining apps with troubling cryptographic vulnerabilities that could help cybercriminals establish man-in-the-middle attacks<\/a>.<\/p>\n

A man-in-the-middle attack<\/a>, or MITM, happens when an attacker intercepts messages and data sent between a victim and its intended recipients. Cybercriminals do this by abusing a complex network of certificates used to validate traffic, essentially setting up a detour route through the attacker\u2019s home turf so they can monitor information. The sought after information often includes usernames and passwords\u2014though data like geolocation and browsing habits can be included too.<\/p>\n

But here\u2019s the thing with MITM attacks on both mobile and desktop devices: They can be fixed fairly easily, but they often aren\u2019t. There is no good reason for this. Developers need to step up their security game and knock out any known vulnerabilities that could harm consumers.<\/p>\n

Thankfully, there are steps users can take to stay safe on their mobile devices:<\/p>\n