Anti-Virus, Anti-Malware, Anti-Theft

Do you really need an AV app on Android? Let's see. There's an interesting graph at phandroid.com, and also a collection of relevant apps at AndroidAuthority. But there's also the conclusion that "many av scanners are useless" (Viele Android-Virenscanner sind nutzlos), or even a security risk themselves (Android-Virenscanner bringen schwere Sicherheitslücken mit). And one should also pay attention to "false security apps": some Trojans pose as security suite (ZitMo Trojaner tarnt sich als Android Security Suite Premium, 6/2012). And what seems "safe and secure" by rating and "big names" might turn out being nothing but a placebo.

Another interesting article is titled Android users give malware apps permission to rob them, express shock at the results. That probably fits about 95% of all real-world cases …

Here in Germany, the publisher Heise is counted a big authority in IT and security. Their article FAQ: Android und Sicherheit, dated December 2012 (c't 17/12) deals with this en detail, and sums it up, it's easily managable. Let me translate rawly: "Vendors of anti-virus software like to peddle with exaggerated horror statistics", and, "Currently almost all smartphone infections are caused by software the users installed actively themselves". They conclude: "The best protection is to use your common sense when installing new apps". I've said that already before they did … One last quote: "Do I need anti-virus software to be safe? – No. According to our assessment, the security gain by installing anti-virus software is too small to make up for the negative side-effects and the added nagging-factor, reduced battery runtime, and possible false-alerts."

And besides: The big-players in the AV business explicitly warn to install apps which ask for too many permissions (see e.g. here) – so especially pay attention to their numbers in below listings: Why such an anti-malware app needs to check for running apps (and might need to kill them) is quite clear (to find and get rid of the "bad guys"). Accessing the Internet for signature updates, check. Read SMS/MMS: yeah, for bad content, OK. Delete it as well if found, check. But what for does it have to send SMS, make phone calls, access the camera, read my bookmarks, read/write my contacts, call logs, calendars, access my precise location, and more? If you'd expect an explanation with the apps' descriptions: nope. Seeing those permissions (and their counts per app), according to the bold text above and even just to common sense, rather makes the impression of some malware camouflaging as security suite. That's like casting out the demons with the ruler of the demons. No, thanks: not on my devices. By the way: the "average Android App" requests about 7 Permissions. Less than 4% of the apps want more than 20. Just to give you a measurement what "too many permissions" could mean.

I don't think 99% plus users even get a benefit from [anti-virus]. There’s certainly no reason that they need to install something in addition to [the security we provide].
If I were to be in a line of work where I need that type of protection it would make sense for me to do that. [But] do I think the average user on Android needs to install [anti-virus]? Absolutely not.

Source: Adrian Ludwig, Google´s chief security engineer for Android

„Anti-Virus for Android“ is like wearing the helmet of a medieval knight to play „Russian Roulette“. You wouldn’t need that helmet if you wouldn’t willingly put yourself at risk (using some common sense is more effective). As you do both, some bullets still penetrate the helmet. And what’s more, the helmet has spikes. Inside. Think of all those „false positives“ causing unnecessary panic, plus vulnerabilities introduced by their often massively high demand on powerful permissions, as well as the again risky modules they usually contain (see here). Remember who wants to tell you that you need that kind of software: its makers. And if you now ask the common question what good it does them if they give it away for free: they don’t. You pay with your data, with your privacy.

For those who still insist, here we go:

Anti-Malware

2019-04-04

Though many of these apps call themselves „Anti-Virus“, that's rather to „raise their importance“ and make you feel you really need their protection. So I've included them into „Anti-Malware“ instead. (Basically, any app calling itself „Anti-Virus“ or even „Best Anti-Virus“ sounds very suspicious to me ) That said: Use at your own risk!

Kaspersky Mobile Antivirus: AppLock & Web Security (4.8@2,883,510) Ǥ 55 / Kaspersky Endpoint Security & Device Management (3.9@15,204) Ǥ 42 Intro 4/2012; Beschreibung 10/2012; Test 10/2014
Security Master - Antivirus, VPN, AppLock, Booster (4.7@25,536,593) Ǥ 52 / CM Security Lite - Antivirus (4.6@270,374) Ǥ 32 / Stubborn Trojan Killer (4.5@170,626) 20 Vorstellung 5/2014; Test 11/2014; Sicherheits-Check 12/2015
Mobile Security & Antivirus (4.7@647,325) Ǥ 40 Review 1/2014; Vorstellung 2/2014; Advertorial 11/2015
360 Security - Free Antivirus, Booster, Cleaner (4.6@16,823,136) Ǥ 51 Vorstellung 3/2014; "Chuck Norris on Steroids": Task-Killer, "Virus" killer… Yo.
Avast Antivirus – Mobile Security & Virus Cleaner (4.6@5,518,923) Ǥ 58 Testbericht 2/2012 | 2/2014 | 10/2014; Review 12/2011 | 4/2012
Norton Security and Antivirus (4.6@1,311,548) Ǥ 40 Review 11/2011
Bitdefender Mobile Security & Antivirus (4.6@167,925) Ǥ 26 Review 3/2012
Mobile Security & Antivirus (4.6@66,014) Ǥ 47 Review 4/2012
VirIT Mobile Security (4.6@1,665) 15 $Contains no known trackers \o/$
Comodo Security & Antivirus (4.6@12) 37 LastUpdate: 2016-09-09 Review 4/2012; Vorstellung 8/2013; Wikipedia
AVG AntiVirus 2019 for Android Security FREE (4.5@6,464,732) Ǥ 55 / AntiVirus PRO Android Security (4.7@86,037; ~EUR 17.00) Ǥ 61 / Tablet AntiVirus Security PRO (4.7@4,938; ~EUR 17.00) Ǥ 61 Testbericht 1/2012; Vorstellung 2/2013
Anti-virus Dr.Web Light (4.5@1,109,103) Ǥ 20 / Dr.Web Security Space Life (4.6@5,440; ~EUR 67.00) Ǥ 36 Intro 4/2012
Antivirus Free - Virus Cleaner (4.5@1,033,277) Ǥ 25
Avira Antivirus Security 2019-Antivirus & AppLock (4.5@545,538) Ǥ 30 Kurzvorstellung 3/2012; Video Demo 4/2014; Vorstellung 5/2014
AMC Security - Clean & Boost (4.5@339,838) Ǥ 53 Swiss army-knife: Anti-Malware, Anti-Theft, System-Tuner, Call-Blocker & more
Antivirus & Mobile Security (4.5@38,999) 8 LastUpdate: 2017-07-31 also checks for ad-modules and problematic permissions
Sophos Mobile Security (4.5@32,891) Ǥ 29
Lookout Security & Antivirus (4.4@973,875) Ǥ 34 Testbericht 12/2011; Intro 4/2012
Mobile Security: Antivirus, Wi-Fi VPN & Anti-Theft (4.4@643,142) Ǥ 57 Intro 4/2012
Antivirus & Mobile Security - Free Protector (4.4@480,552) Ǥ 41
NQ Mobile Security & Antivirus (4.4@431,982) Ǥ 44 Video Walk-Through 2/2012; Review 4/2012; Vorstellung 6/2013; Abo: ~EUR 2/month (Geld-wech)
Malwarebytes Security: Virus Cleaner, Anti-Malware (4.4@196,121) Ǥ 26
Zoner AntiVirus (4.4@49,130) Ǥ 17 $Contains no known trackers \o/$ Intro 4/2012
AntiVirus & Mobile Security (4.3@6,645) 12 LastUpdate: 2016-05-28
Antivirus Go Next for Android™ (4.3@3,414) Ǥ 8
Emsisoft Mobile Security (4.3@1,657) Ǥ 34
OWASP Seraphimdroid security (4.3@58) 22 Github; open-source security package: anti-malware, anti-theft, app-locker, sms/call blocker and more
Webroot Mobile Security & Antivirus (4.2@16,003) Ǥ 33 / Security - Complete (3.8@2,866) Ǥ 36 / Security - Premier (4.2@980; ~EUR 16.00) Ǥ 36 Testbericht 8/2012; comprehensive care-free package: AntiVirus, WebThreats, AntiTheft
IKARUS mobile.security (4.2@2,976) Ǥ 21
Anti Spy Mobile Free (4.1@18,724) 0 $Contains no known trackers \o/$ / Anti Spy Mobile PRO (4.3@1,385; ~EUR 5.00) Ǥ 3 Intro 6/2012; AppThread@XDA-Forum
Bastiv Mobile Security and Antivirus (4.1@468) Ǥ 27
G DATA INTERNET SECURITY light (4@9,609) Ǥ 48 / G DATA INTERNET SECURITY (4.1@611; ~EUR 16.00) Ǥ 40 Vorstellung 6/2012 ~EUR 20/year

Exploit Detection/Protection

2019-04-04

HeartBleed Detector (4.6@3,589) 1 LastUpdate: 2014-05-05 Intro 4/2014; Vorstellung 4/2014
QuadRooter Scanner (4.4@4,138) 4 LastUpdate: 2016-08-28
Belarc Security Advisor (4.4@1,156) 1 LastUpdate: 2016-08-08
Fake ID fix (4.4@371) 0 $Contains no known trackers \o/$ LastUpdate: 2014-08-10 Repo; XDA incl. instructions; Video Demo 8/2014; Security against installation of certain malicious apps (see here for details of the hole)
Heartbleed Detector (4.3@389) 0 $Contains no known trackers \o/$ LastUpdate: 2014-08-06
Heartbleed Security Scanner (4.2@19,393) 1 LastUpdate: 2014-04-10 Kurzvorstellung 4/2014; Intro 4/2014
Stagefright Detector (4.2@11,480) 1 $Contains no known trackers \o/$ LastUpdate: 2016-12-13 Vorstellung 8/2015 (mit Video)
Norton Halt exploit defender (4.2@2,841) 8
Stagefright Detector (4.1@7,465) 1 LastUpdate: 2015-08-19 Vorstellung 8/2015 | 8/2015; Intro 8/2015
Certifi-gate Scanner (4.1@1,338) 4 $Contains no known trackers \o/$ LastUpdate: 2016-08-11
ReKey (for rooted phones) (4@528) 2 $Contains no known trackers \o/$ LastUpdate: 2016-09-13 Kurzvorstellung 7/2013
Recap (4@42) 9 LastUpdate: 2016-02-18
BlueBorne Vulnerability Scanner by Armis (3.9@1,317) Ǥ 7
Qualcomm QuadRooter Scanner (3.9@197) Ǥ 4 LastUpdate: 2016-08-26
VTS for Android (0@0) 3 LastUpdate: 2015-12-14 Github; Vulnerability Test Suite. Check your device!
Master Key Fix (Support GingerBread) (0@0) LastUpdate: 2014-08-20

Anti-Theft

2019-04-04

An overlap with the anti-malware section is unavoidable: full-fledged security suites try to cover (almost) everything …

Kaspersky Mobile Antivirus: AppLock & Web Security (4.8@2,883,510) Ǥ 55 / Kaspersky Endpoint Security & Device Management (3.9@15,204) Ǥ 42 Intro 4/2012; Beschreibung 10/2012; Test 10/2014
MobiCape (4.7@36) Ǥ 14 LastUpdate: 2017-08-19
Avast Antivirus – Mobile Security & Virus Cleaner (4.6@5,518,923) Ǥ 58 Testbericht 2/2012 | 2/2014 | 10/2014; Review 12/2011 | 4/2012
Norton Security and Antivirus (4.6@1,311,548) Ǥ 40 Review 11/2011
Comodo Security & Antivirus (4.6@12) 37 LastUpdate: 2016-09-09 Review 4/2012; Vorstellung 8/2013; Wikipedia
Avira Antivirus Security 2019-Antivirus & AppLock (4.5@545,538) Ǥ 30 Kurzvorstellung 3/2012; Video Demo 4/2014; Vorstellung 5/2014
AMC Security - Clean & Boost (4.5@339,838) Ǥ 53 Swiss army-knife: Anti-Malware, Anti-Theft, System-Tuner, Call-Blocker & more
CrookCatcher - Anti Theft (4.5@45,521) Ǥ 18 XDA 4/2014; Intro 6/2014
Lockwatch - Thief Catcher (4.5@44,135) Ǥ 12 $Contains no known trackers \o/$ Intro 9/2013 | 10/2013; Video Demo 7/2014; mails you w/ photo of unsuccessful unlock attempters
Mobile Security: Antivirus, Wi-Fi VPN & Anti-Theft (4.4@643,142) Ǥ 57 Intro 4/2012
NQ Mobile Security & Antivirus (4.4@431,982) Ǥ 44 Video Walk-Through 2/2012; Review 4/2012; Vorstellung 6/2013; Abo: ~EUR 2/month (Geld-wech)
Cerberus Phone Security (Antitheft) (4.3@111,870) Ǥ 39 Kurzvorstellung 3/2012 | 12/2014; Video Review 4/2012 | 7/2013; Test 2/2013; Vorstellung 3/2013
Antitheft Droid SMS - Security (4.3@30,571) Ǥ 22
OWASP Seraphimdroid security (4.3@58) 22 Github; open-source security package: anti-malware, anti-theft, app-locker, sms/call blocker and more
Prey Anti Theft: Find My Phone & Mobile Security (4.2@60,565) Ǥ 23 Video Review 8/2012; Tutorial 5/2013
Easy Finder & Anti-Theft (4.2@27,223) Ǥ 48 LastUpdate: 2017-07-05
Webroot Mobile Security & Antivirus (4.2@16,003) Ǥ 33 / Security - Complete (3.8@2,866) Ǥ 36 / Security - Premier (4.2@980; ~EUR 16.00) Ǥ 36 Testbericht 8/2012; comprehensive care-free package: AntiVirus, WebThreats, AntiTheft
Antitheft Droid WEB - Security (4.2@7,596) Ǥ 19
Anti Theft - Thief Catcher (4.2@416) 8 $Contains no known trackers \o/$ incl. photo of unsuccessful unlocker;
Anti Theft Mobile Tracker (4.1@1,439) Ǥ 21
SmSimApp Anti Theft (4@635) Ǥ 14 $Contains no known trackers \o/$ remote lock/wipe, find device, remotely take photos, have it call you (hidden to thief) so you can listen in, forward all incloming messages
Anti Theft & Find My Phone (3.9@7,379) Ǥ 20 LastUpdate: 2016-08-27
Phone Locator (3.9@6,229) Ǥ 16 LastUpdate: 2017-03-27
SeekDroid: Find My Phone (3.9@5,202) Ǥ 15 $Contains no known trackers \o/$ Video Review 1/2011; Intro 12/2011
AllSecure: Anti Theft & Backup (3.9@284) Ǥ 31 LastUpdate: 2014-05-02
Anti Theft Android Watchdog (3.8@259) Ǥ 18 take photos & record thief's conversation, track (falling) device; stealth mode

Theft-Alert: Make noise when device is moved

2019-04-04

Antitheft Alarm Phone Security (4.6@1,120) Ǥ 15 LastUpdate: 2017-09-12
Anti Theft Alarm (4.5@66,382) Ǥ 10
CrookCatcher - Anti Theft (4.5@45,521) Ǥ 18 XDA 4/2014; Intro 6/2014
Alarm Anti Theft Screen Lock (4.5@34,520) Ǥ 14 LastUpdate: 2016-08-07
Anti-theft alarm (4.4@100,235) Ǥ 23
Anti Theft Alarm -Motion Alarm (4.4@46,719) Ǥ 18 / Anti Theft Alarm Pro Motion (4.4@420; ~EUR 1.00) Ǥ 21 Vorstellung 2/2013;
alarMob - Anti-theft alarm (4.4@1,627) Ǥ 10
Anti-Theft Alarm (4.4@115) 4 LastUpdate: 2016-09-12
Anti-Theft Alarm (4.3@1,959) 6 LastUpdate: 2017-08-10
Emsisoft Mobile Security (4.3@1,657) Ǥ 34
Anti Theft Alarm (4.3@707) 17
globio Alarm System (4.2@6,878) 17 / globio + Donation (4.4@1,820; ~EUR 3.75) 19 Testbericht 9/2012 | 9/2012; Test 10/2012 | 10/2012
Automatic Anti Theft Alarm (4.2@644) Ǥ 6 LastUpdate: 2016-09-24
Anti Theft Alarm (4.2@56) 7 LastUpdate: 2017-01-16
Bastiv Mobile Security and Antivirus (4.1@468) Ǥ 27
Intruder Selfie™ (4@15,443) Ǥ 9
Anti-theft alarm (3.9@775) Ǥ 5 LastUpdate: 2016-09-20

Find my device

2019-04-14

Apps dedicated to find lost devices. Certainly overlaps with anti-theft and anti-malware sections, where some apps might include this feature.

Google Find My Device (4.4@588,476) Ǥ 9
Wheres My Droid (4.4@109,955) Ǥ 20 Video Review 8/2011; Short Review 8/2011
Find iPhone, Android Devices, xfi Locator Lite (4.3@29,070) Ǥ 9
Find My Phone (4.2@288,678) Ǥ 32
Lost Android (4.2@72,704) Ǥ 32 Video Demo 3/2012 (DE, >30 min); Intro 10/2012 | 7/2013; Vorstellung 5/2014
Phone Tracker - Anti Theft (4.2@534) Ǥ 24
Find Lost Phone (4.1@15,776) Ǥ 9
Find My Phone Security (4@852) Ǥ 20 LastUpdate: 2016-09-18 / Find My Phone Pro (4.1@1,079; ~EUR 1.00) Ǥ 22 LastUpdate: 2016-09-18
Seguime (3@1) 10 $Contains no known trackers \o/$ GitLab; Find-my-Phone with your own server
Device Locator (0@0) 6 $Contains no known trackers \o/$ GitLab

Anti-Others

2019-04-05

What didn't fit elsewhere

NoPhish (4.7@79) 1 $Contains no known trackers \o/$ LastUpdate: 2017-07-13 Vorstellung 6/2017; Lernen, Phishing-Attacken zu erkennen
Third Eye (4.4@28,223) Ǥ 12
PilferShush Jammer (4.2@14) 2 $Contains no known trackers \o/$ Github; blocks your mike so other apps cannot use it; shall protect against NUHF signals (ad trackers)
Witness Lite (4@40) Ǥ 7 $Contains no known trackers \o/$ / Witness Pro (3.4@72; ~EUR 2.00) Ǥ 7 Vorstellung 4/2013; logs every unlock with a photo
PluckLockEx (4@14) 2 $Contains no known trackers \o/$ Github; locks your device when „snatched“ (fast acceleration)
SnoopSnitch (3.3@3,275) 15 Intro 1/2015; Video Demo 11/2016; Mike‘s favorite; detect Stingray Cell Phone Trackers

Further Readings:

Category Ad-Modules and Privacy Checker
General
- Schadprogramme: Was tun bei Infektionen? (11/2018)
- Umfrage Bitkom: Panikmache? (12/2017)
- Dauerbrenner Phishing (9/2015 - 5/2017)
- Vault7: CIA und Anti-Virus-Software: Was sagt die CIA über Anti-Virus-Produkte? (3/2017)
- Android-Vulnerabilities-Overview
- Sicherheitsapps für Android-Geräte (8/2015 - 11/2017)
- Android-Virenscanner bringen schwere Sicherheitslücken mit (6/2016)
- Ausgerechnet Sicherheits-Apps sind eine Gefahr (6/2016)
- Clickjacking: Der Trick mit dem überdeckten Bildschirm (4/2016)
- Stagefright-Lücken in Android: Geräte-Hersteller lassen Nutzer im Unklaren (8/2015)
- So schützt ihr das Smartphone vor der Stagefright-Sicherheitslücke (8/2015)
- Mit diesen 12 Sicherheitstipps könnt Ihr Euer Smartphone und Eure Daten schützen (12/2014)
- Security-Apps: Welche Android-Security-Apps arbeiten sauber und effizient? (10/2014)
- 9 Best Android Security apps 2014 (2/2014)
- Android-Virenscanner greifen private Daten ab (2/2014)
- So sichert man Smartphone und Tablet (2/2014)
- Das Android-Smartphone absichern ohne root (2/2013)
- Smartphone-Sicherheit: Wo Gefahren lauern und wie man sich schützen kann (11/2012)
Malware
- So schüren Virenscanner unbegründet Panik (8/2018)
- Viren auf dem Handy? (8/2018)
- Malware-Angriffe auf Smartphones – die unterschätzte Gefahr (8/2018; mit Tipps für Vorsichtsmaßnahmen)
- Play Protect: Virenschutz made by Google (9/2017 - 11/2018)
- Antiviren-Scanner: Mehr Risiko als Schutz? – Snakeoil Teil1 (4/2017) | Teil 2 (4/2017) | Teil 3 (5/2017)
- Is there really such a thing as an Android virus?
  technically there are no Android viruses. […] Most people think of any malicious software as a virus, even though it is technically inaccurate.
- Schadprogramme: Was tun bei Infektionen? (1/2017) / Schadprogramme auf Mobilgeräten (6/2015-4/2017)
- McAfee VirusScan Enterprise gefährdet Linux-Systeme (12/2016)
  in other words: don´t use such stuff where it´s not even needed
- So wirkungsvoll schützen Anitivirus-Apps (8/2016)
- Antivirus software is snake oil! (6/2016)
- Wenn sich Apps zum Angriff verbünden (7/2016)
- Virenscanner für Android-Geräte: was sie leisten können und wo sie an ihre Grenzen stoßen (8/2015 - 11/2018)
- Android antivirus apps are useless — here’s what to do instead (4/2015)
- Malware is an exaggerated issue (4/2015)
- Android Malware-Gefahr stark übertrieben: Google veröffentlicht Android-Sicherheitsbericht für 2014 (4/2015)
- Die zehn auffälligsten Android-Schädlinge 2014 (2/2015)
  Conclusion: having your provider block premium services renders most of them futile
- Even „Google Play“ isn't spared: Malicious Android apps spamming users with adware have reportedly made their way into the Google Play Store (2/2015)
- Die besten Antivirus-Apps für Android im Test (12/2014)
- Fraunhofer Institut: Antivirus-Apps sind machtlos (8/2014)
- Android Sicherheitschef: Anti-Malware-Apps sind überbewertet (7/2014)
- Must read: Android Antivirus: 6 truths about smartphone malware + The 4 best Android anti-virus apps (5/2014)
- Google Play Services Update – Google bekämpft Malware (2/2014)
- Android-Virenscanner schnüffeln Surf-Verhalten aus (2/2014)
- 2013: Zielgruppenspezifische Malware und der Aufstieg (und Niedergang) von Adware (2/2014)
- Android app learns from your phone to fend off malicious attacks (1/2014; leider noch nicht für den Endkunden verfügbar)
- Forschung: Virenscanner für Android bieten kaum Sicherheit (5/2013): Virenscanner für Android können laut unabhängiger Tests mit einfachen Tricks umgangen werden. Gleiches berichtet SlashDot
- 5 Beispiele für kreative (und furchteinflössende) Android-Malware (2/2013)
- Android-Malware: Wie bedroht sind Android-Smartphones? (2/2013)
- Antivirus-Apps im Test (2/2013)
- Viele Android-Virenscanner sind nutzlos (3/2012)
Theft/Loss
- Handy orten – wie geht das? (7/2018)
- Smartphone verloren oder geklaut: So findet man es wieder (10/2017)
- How to find a lost or stolen Android phone (7/2017)
- Handy weg: So findet man es wieder (6/2017)
- Checkliste: Handy geklaut oder verloren? So sorgen Sie vor (5/2017)
- Smartphone-Diebstahl: So schützt ihr Smartphone und Daten am besten (3/2015)
- Bei Verlust und Diebstahl: So findet man sein Smartphone (9/2014)
- Kommissar Smartphone: Was bei Handy-Diebstahl zu tun ist (5/2014)
- What are the best free apps for tracking and recovering an android device? (3/2014)
- Handy orten und Diebstahlschutz: Apps für Android im Test (7/2013)
- Wo ist mein Smartphone? Verlorene oder geklaute Handys orten (3/2013)

Possibilities to check apps for security issues

Some websites offer such services:

Android & iOS: Gratis-Werkzeuge zur Malware-Analyse (2/2014: ViaForensic's Santoku Linux)
Trustlook also hides some reports, which you can ferret using some Google-Fu: search for "Threat Report of Android App" "com.app.foobar" site:trustlook.com (of course, replace "com.app.foobar" with the package name of the app you're looking for)
ViaForensic's ~~appWatchdog~~ is currently unavailable, unfortunately

2019-04-20

IzzyOnDroid