Mobile malware exploding, but only for Android
Malware targeting mobile devices is rapidly growing in both the number of variants found in the wild and in their complexity and sophistication, but the only platform being actively targeted is Google's Android, which researchers now say is resembling Windows on the desktop PC.
Context & Ripple Effects
Android's malware problem has been compounding for two years before this report: McAfee found nearly all new mobile malware in Q3 2011 targeted Android (McAfee's Q3 2011 tally), the same season researchers logged a 472% increase in Android malware since July 2011, and Lookout documented a sharp rise over the first half of that year. What is new in this May 2013 report is not the direction but the characterization — researchers now describe Android's situation as resembling Windows on the desktop PC.
The story travelled unusually wide for a research-note item, picked up by PC Magazine, Market Wire, and MacDailyNews on the same day, reflecting how charged the Apple-versus-Google framing had become by 2013. It lands just as Google uses I/O to pitch Android as an ecosystem reaching millions of users daily, making the security gap a counterweight to that developer narrative.
First-order effects
- Android users carry the direct exposure: with Android the only platform actively targeted, every new variant and more sophisticated strain lands exclusively on Google's install base.
- Security vendors like McAfee and Lookout, which have been publishing these Android tallies since 2011, see commercial demand for mobile security products validated as the threat shifts from nuisance to structural.
Second-order effects
- Google faces mounting pressure over its app distribution model — the open sideloading and lighter vetting that differentiate Android from Apple's curated App Store become the mechanism attackers exploit, forcing a choice between openness and control.
- Enterprise buyers weighing Android devices for work fleets must now price in endpoint security software and management overhead, giving iOS a security-based argument in corporate procurement that costs nothing for Apple to make.
Third-order effects
- If the pattern holds, mobile malware economics will fully mirror the desktop: attackers concentrate on whichever platform has the largest addressable base, making market share itself the primary determinant of user risk rather than any inherent technical superiority.
- Mobile security consolidates into a standing product category — bundled antivirus, app-scanning, and enterprise device management — adding a permanent cost layer to smartphone ownership that did not exist when the platforms launched.
The trend: Malware follows installed base: as Android became the volume leader of smartphones, it began reproducing the Windows-on-desktop dynamic where the dominant platform absorbs nearly all attacker attention.