Anti-Virus, Anti-Malware, Anti-Theft

Do you really need an AV app on Android? Let's see. There's an interesting graph at phandroid.com, and also a collection of relevant apps at AndroidAuthority. But there's also the conclusion that "many av scanners are useless" (Viele Android-Virenscanner sind nutzlos), or even a security risk themselves (Android-Virenscanner bringen schwere Sicherheitslücken mit). And one should also pay attention to "false security apps": some Trojans pose as security suite (ZitMo Trojaner tarnt sich als Android Security Suite Premium, 6/2012). And what seems "safe and secure" by rating and "big names" might turn out being nothing but a placebo.

Another interesting article is titled Android users give malware apps permission to rob them, express shock at the results. That probably fits about 95% of all real-world cases …

Here in Germany, the publisher Heise is counted a big authority in IT and security. Their article FAQ: Android und Sicherheit, dated December 2012 (c't 17/12) deals with this en detail, and sums it up, it's easily managable. Let me translate rawly: "Vendors of anti-virus software like to peddle with exaggerated horror statistics", and, "Currently almost all smartphone infections are caused by software the users installed actively themselves". They conclude: "The best protection is to use your common sense when installing new apps". I've said that already before they did … One last quote: "Do I need anti-virus software to be safe? – No. According to our assessment, the security gain by installing anti-virus software is too small to make up for the negative side-effects and the added nagging-factor, reduced battery runtime, and possible false-alerts."

And besides: The big-players in the AV business explicitly warn to install apps which ask for too many permissions – so especially pay attention to their numbers in below listings: Why such an anti-malware app needs to check for running apps (and might need to kill them) is quite clear (to find and get rid of the "bad guys"). Accessing the Internet for signature updates, check. Read SMS/MMS: yeah, for bad content, OK. Delete it as well if found, check. But what for does it have to send SMS, make phone calls, access the camera, read my bookmarks, read/write my contacts, call logs, calendars, access my precise location, and more? If you'd expect an explanation with the apps' descriptions: nope. Seeing those permissions (and their counts per app), according to the bold text above and even just to common sense, rather makes the impression of some malware camouflaging as security suite. That's like casting out the demons with the ruler of the demons. No, thanks: not on my devices. By the way: the "average Android App" requests about 7 Permissions. Less than 4% of the apps want more than 20. (Both values from 2012/2013; ten years later it’s rather about 10 permissions and 5%). Just to give you a measurement what "too many permissions" could mean.

I don't think 99% plus users even get a benefit from [anti-virus]. There’s certainly no reason that they need to install something in addition to [the security we provide].
If I were to be in a line of work where I need that type of protection it would make sense for me to do that. [But] do I think the average user on Android needs to install [anti-virus]? Absolutely not.

Source: Adrian Ludwig, Google´s chief security engineer for Android

„Anti-Virus for Android“ is like wearing the helmet of a medieval knight to play „Russian Roulette“. You wouldn’t need that helmet if you wouldn’t willingly put yourself at risk (using some common sense is more effective). As you do both, some bullets still penetrate the helmet. And what’s more, the helmet has spikes. Inside. Think of all those „false positives“ causing unnecessary panic, plus vulnerabilities introduced by their often massively high demand on powerful permissions, as well as the again risky modules they usually contain (see here). Remember who wants to tell you that you need that kind of software: its makers. And if you now ask the common question what good it does them if they give it away for free: they don’t. You pay with your data, with your privacy.

For those who still insist, here we go. Try to find one that doesn’t come with malware (in form of trackers) itself:

Anti-Malware

2024-12-05

Though many of these apps call themselves „Anti-Virus“, that's rather to „raise their importance“ and make you feel you really need their protection. So I've included them into „Anti-Malware“ instead. (Basically, any app calling itself „Anti-Virus“ or even „Best Anti-Virus“ sounds very suspicious to me ) That said: Use at your own risk!

AMC Security- Antivirus, Clean (5@32) Ǥ 47 13 LastUpdate: 2023-01-10 Swiss army-knife: Anti-Malware, Anti-Theft, System-Tuner, Call-Blocker & more
ESET Mobile Security Antivirus (4.8@1,029,360) Ǥ 49 2 Video Review & Tutorial 2/2017
Avira Security Antivirus & VPN (4.8@705,914) Ǥ 40 8 Privatsphäre-Check 11/2021 ("Risiko für Sicherheit und Datenschutz")
AVG AntiVirus & Security (4.7@7,901,295) Ǥ 39 7
Avast Antivirus & Security (4.7@7,280,251) Ǥ 31 7 verkauft Surf-Daten seiner User | Wie Avast die Daten seiner Kunden verkaufte (2/2020)
Bitdefender Mobile Security (4.7@424,468) Ǥ 37 3
360 Security - Antivirus Free (4.7@338) Ǥ 45 15 LastUpdate: 2020-06-18 "Chuck Norris on Steroids": Task-Killer, "Virus" killer… Yo.
Norton360 Antivirus & Security (4.6@1,866,993) Ǥ 43 7
Malwarebytes Mobile Security (4.6@435,358) Ǥ 26 5
VPN & Antivirus by Kaspersky (4.6@83) Ǥ 56 7 / Kaspersky Endpoint Security (3.8@16,300) Ǥ 50 5
F-Secure Mobile Security (4.5@1,138,003) Ǥ 42 3
PObY-A (4.5@10) 14 $Contains no trackers known to us \o/$ Github; malware & permission scanner and more
Mobile Security & Antivirus (4.4@435,031) Ǥ 42 10 Abo: ~EUR 2/month (Geld-wech)
Mobile Security & Antivirus (4.4@125,085) Ǥ 56 6
Webroot Mobile Security & AV (4.2@17,369) Ǥ 32 3 LastUpdate: 2022-07-27 comprehensive care-free package: AntiVirus, WebThreats, AntiTheft
G DATA Mobile Security Light (4.2@10,888) Ǥ 33 2 / G DATA Mobile Security (4.1@800; ~EUR 10.00) Ǥ 21 2 ~EUR 20/year
VirIT Mobile Security (4.1@2,201) 15 $Contains no trackers known to us \o/$ LastUpdate: 2021-04-26
Emsisoft Mobile Security (4.1@2,136) Ǥ 35 4
Anti Spy Mobile PRO (4.1@1,655; ~EUR 5.00) Ǥ 3 $Contains no trackers known to us \o/$ LastUpdate: 2021-11-14 AppThread@XDA-Forum
Anti-virus Dr.Web Light (4@1,155,163) Ǥ 26 2
Zoner AntiVirus (4@50,317) Ǥ 19 $Contains no trackers known to us \o/$ LastUpdate: 2022-07-13
Sophos Intercept X for Mobile (4@46,687) Ǥ 41 4
IKARUS mobile.security (3.7@3,332) Ǥ 25 3
McAfee Security: Antivirus VPN (3.6@833,849) Ǥ 64 8
Hypatia (0@0) 10 $Contains no trackers known to us \o/$ GitLab

Exploit Detection/Protection

2024-12-05

Stagefright Detector (4@11,243) 1 $Contains no trackers known to us \o/$ LastUpdate: 2020-10-04
ReKey (for rooted phones) (4@528) 2 $Contains no trackers known to us \o/$ LastUpdate: 2016-09-13
Heartbleed Detector (3.8@19,201) 1 1 LastUpdate: 2014-04-10 Kurzvorstellung 4/2014; Intro 4/2014
Stagefright Detector (3.8@7,509) 1 1 LastUpdate: 2015-08-19 Vorstellung 8/2015 | 8/2015; Intro 8/2015
Heartbleed Detector (3.6@384) 0 $Contains no trackers known to us \o/$ LastUpdate: 2014-08-06
StartFlagExploit (0@0) 0 $Contains no trackers known to us \o/$ LastUpdate: 2020-06-09 Github; affects Android 10+11

Anti-Theft

2024-12-05

An overlap with the anti-malware section is unavoidable: full-fledged security suites try to cover (almost) everything …

AMC Security- Antivirus, Clean (5@32) Ǥ 47 13 LastUpdate: 2023-01-10 Swiss army-knife: Anti-Malware, Anti-Theft, System-Tuner, Call-Blocker & more
Avira Security Antivirus & VPN (4.8@705,914) Ǥ 40 8 Privatsphäre-Check 11/2021 ("Risiko für Sicherheit und Datenschutz")
Avast Antivirus & Security (4.7@7,280,251) Ǥ 31 7 verkauft Surf-Daten seiner User | Wie Avast die Daten seiner Kunden verkaufte (2/2020)
Norton360 Antivirus & Security (4.6@1,866,993) Ǥ 43 7
VPN & Antivirus by Kaspersky (4.6@83) Ǥ 56 7 / Kaspersky Endpoint Security (3.8@16,300) Ǥ 50 5
Mobile Security & Antivirus (4.4@435,031) Ǥ 42 10 Abo: ~EUR 2/month (Geld-wech)
CrookCatcher • Anti-Theft (4.2@68,431) Ǥ 27 3
Webroot Mobile Security & AV (4.2@17,369) Ǥ 32 3 LastUpdate: 2022-07-27 comprehensive care-free package: AntiVirus, WebThreats, AntiTheft
Lockwatch - Thief Catcher (4.1@73,548) Ǥ 18 2 mails you w/ photo of unsuccessful unlock attempters, SIM changes etc.
Antitheft Droid WEB - Security (3.7@8,260) Ǥ 23 3 LastUpdate: 2022-10-22
McAfee Security: Antivirus VPN (3.6@833,849) Ǥ 64 8
Anti Theft Mobile Tracker (3.4@2,192) Ǥ 17 2 LastUpdate: 2020-02-26
Prey: Find My Phone & Security (2.9@62,740) Ǥ 22 2

Theft-Alert: Make noise when device is moved

2024-12-05

alarMob - Anti-theft alarm (4.5@1,630) Ǥ 12 6 LastUpdate: 2019-04-02
Anti Theft Alarm (4.4@73,200) Ǥ 10 12 LastUpdate: 2017-12-08
Anti Theft Phone Alarm (4.4@35,562) Ǥ 24 1
Anti Theft Alert (4.4@15,457) 17 4
Anti-theft alarm (4.3@112,976) Ǥ 22 5 LastUpdate: 2020-02-02
Don’t Touch My Phone AntiTheft (4.2@216,827) Ǥ 16 5 touches your data, oops…
Phone Anti-Theft Alarm (4.2@199,852) Ǥ 20 5
CrookCatcher • Anti-Theft (4.2@68,431) Ǥ 27 3
Alarm Anti Theft Screen Lock (4.2@35,601) Ǥ 13 2 LastUpdate: 2016-08-07
Intruder Selfie™ (4.2@31,785) 6 2 LastUpdate: 2018-01-21
Don’t Touch - Intruder Selfie (4.1@26,340) Ǥ 11 4
Emsisoft Mobile Security (4.1@2,136) Ǥ 35 4
Don’t Touch My Phone (4@8,530) Ǥ 7 2
globio Alarm System (3.4@7,006) 17 3 LastUpdate: 2020-04-10 / Mobile Alarm System (3.5@1,820; ~EUR 1.00) Ǥ 10 2 LastUpdate: 2019-03-09
Fall (0@0) 0 $Contains no trackers known to us \o/$ LastUpdate: 2022-11-07 Github; lets your phone scream if it moves to fast

Find my device

2024-11-28

Apps dedicated to find lost devices. Certainly overlaps with anti-theft and anti-malware sections, where some apps might include this feature.

Google Find My Device (4.2@1,381,750) Ǥ 22 1
Find Phone by Whistling 2 (4.2@11,351) Ǥ 17 6 LastUpdate: 2022-10-26
Find My Phone: Find Lost Phone (4.1@74,598) Ǥ 21 3
Find My Phone Whistle: finder (4@364,275) Ǥ 16 16
Find My Phone (4@309,186) Ǥ 27 17 LastUpdate: 2021-03-19
Track it EVEN if it is off (4@161,119) Ǥ 31 17 intro 9/2023; find my device, fake shutdown, panic button, intrudor detector and more
Lost Android (4@76,267) Ǥ 35 $Contains no trackers known to us \o/$ LastUpdate: 2022-07-19
Find My Phone by whistle (4@55,586) 14 22 / Find my phone by clap PRO (3.9@23,611) Ǥ 17 22 / Find my phone by Voice (3.4@2,708) 12 22
Wheres My Droid (3.9@112,461) Ǥ 34 7
Whistle Phone Finder PRO (3.2@19,877) 5 $Contains no trackers known to us \o/$ LastUpdate: 2021-08-03
Find iPhone, Android, Xfi Loc (3.1@42,496) Ǥ 15 23
Seguime (3@1) 13 $Contains no trackers known to us \o/$ LastUpdate: 2021-10-13 GitLab; Find-my-Phone with your own server
Clap to Find (2.8@50,377) Ǥ 21 4
Device Locator (0@0) 6 $Contains no trackers known to us \o/$ LastUpdate: 2018-08-15 GitLab
Locate my device (0@0) 10 $Contains no trackers known to us \o/$ LastUpdate: 2022-10-29 Github; query (and control) via SMS
Find My Device (FMD) (0@0) 25 $Contains no trackers known to us \o/$ GitLab
Monitor Internetless (0@0) Ǥ 21 $Contains no trackers known to us \o/$ LastUpdate: 2022-08-23 Github; locate and control your phone via SMS
Finder (0@0) 15 $Contains no trackers known to us \o/$ LastUpdate: 2020-09-18 Github

Anti-Others

2024-12-05

What didn't fit elsewhere

NoPhish (4.7@95) 1 $Contains no trackers known to us \o/$ LastUpdate: 2017-07-13 Vorstellung 6/2017; Lernen, Phishing-Attacken zu erkennen
Intruder Selfie Alert (4.4@12,120) Ǥ 15 2
Third Eye - Intruder Detection (4.3@71,088) Ǥ 17 6
Who Tried To Unlock - Don't Touch my phone Alarm (4.2@13,504) Ǥ 10 2 LastUpdate: 2020-07-10 wrong password photo capture
PilferShush Jammer (4.1@498) 3 $Contains no trackers known to us \o/$ LastUpdate: 2022-06-28 Github; blocks your mike so other apps cannot use it; shall protect against NUHF signals (ad trackers)
WTMP: Who Touched My Phone (4@16,593) 9 2 logs every unlock with a photo
PluckLockEx (3.7@18) 2 $Contains no trackers known to us \o/$ LastUpdate: 2018-07-19 Github; locks your device when „snatched“ (fast acceleration)
SnoopSnitch (3.5@4,017) 16 $Contains no trackers known to us \o/$ Intro 7/2019; Vorstellung 4/2018 | 1/2020; Mike’s favorite; detect Stingray Cell Phone Trackers and missing security patches
Privacy Cell (0@0) 6 $Contains no trackers known to us \o/$ verify that a phone is using the most secure cell protocols
AirGuard - AirTag protection (0@0) 17 $Contains no trackers known to us \o/$ Github; Vorstellung 9/2021; protect yourself from Apple's Find My Tracking

Further Readings:

Category Ad-Modules and Privacy Checker
General
- FTC says Avast promised privacy, but pirated consumers’ data for treasure (concerns Avast & AVG) (2/2024)
- 5 Ways to Check If Your Android Device Is Hacked (2/2022 - 9/2023)
- Trügerische Sicherheit: Virenscanner-Apps sind schlichtweg überflüssig (11/2021)
- Why You Should Uninstall Your Android Antivirus Software (10/2021)
- Closely check BEFORE you install: Warnung vor „Fleeceware“ (8/2020)
- Umfrage Bitkom: Panikmache? (12/2017)
- Vault7: CIA und Anti-Virus-Software: Was sagt die CIA über Anti-Virus-Produkte? (3/2017)
- Dauerbrenner Phishing (9/2015 - 11/2019)
- Schadprogramme: Was tun bei Infektionen? (8/2015 - 2/2022)
- Sicherheitsapps für Android-Geräte (8/2015 - 11/2018)
- Android-Virenscanner bringen schwere Sicherheitslücken mit (6/2016)
- Clickjacking: Der Trick mit dem überdeckten Bildschirm (4/2016)
- Android-Virenscanner greifen private Daten ab (2/2014)
Malware
- Stiftung Warentest 07/2023: Test von Antiviren-Apps mit zweifelhaften Ergebnissen (6/2023)
- Brauche ich einen Virenscanner? (6/2015 - 11/2021)
- Google Play Protect Sucks at Detecting Malware (7/2021)
- Populärer Gratis-Virenscanner verkauft Surf-Daten seiner User (1/2020)
- How effective is the antivirus app on your smartphone? (4/2019)
- Malware-Angriffe auf Smartphones – die unterschätzte Gefahr (7/2018; mit Tipps für Vorsichtsmaßnahmen)
- Play Protect: Virenschutz made by Google (9/2017 - 1/2022)
- Antiviren-Scanner: Mehr Risiko als Schutz? – Snakeoil Teil1 (4/2017) | Teil 2 (4/2017) | Teil 3 (5/2017)
- Is there really such a thing as an Android virus?
  technically there are no Android viruses. […] Most people think of any malicious software as a virus, even though it is technically inaccurate.
- Schadprogramme: Was tun bei Infektionen? (1/2017 - 2/2022) / Schadprogramme auf Mobilgeräten (6/2015 - 11/2021)
- McAfee VirusScan Enterprise gefährdet Linux-Systeme (12/2016)
  in other words: don´t use such stuff where it´s not even needed
- Wenn sich Apps zum Angriff verbünden (7/2016)
- Virenscanner für Android-Geräte: was sie leisten können und wo sie an ihre Grenzen stoßen (8/2015 - 11/2018)
- Android antivirus apps are useless — here’s what to do instead (4/2015 - 8/2020)
- Malware is an exaggerated issue (4/2015)
- Android Malware-Gefahr stark übertrieben: Google veröffentlicht Android-Sicherheitsbericht für 2014 (4/2015)
- Even „Google Play“ isn't spared: Malicious Android apps spamming users with adware have reportedly made their way into the Google Play Store (2/2015)
- Android Sicherheitschef: Anti-Malware-Apps sind überbewertet (7/2014)
- Must read: Android Antivirus: 6 truths about smartphone malware (5/2014)
- Android-Virenscanner schnüffeln Surf-Verhalten aus (2/2014)
- Antivirus-Apps im Test (2/2013 - 4/2019)
Theft/Loss
- How to find a lost or stolen phone (5/2020)
- How to Trace and Find Your Phone's Location (12/2019 - 7/2023)
- Handy orten – wie geht das? (8/2015 - 5/2022)
- How to find a lost or stolen Android phone (7/2017)
- Checkliste: Handy geklaut oder verloren? So sorgen Sie vor (5/2017 - 4/2022)
- Wo ist mein Smartphone? Verlorene oder geklaute Handys orten (3/2013 - 12/2019)
Misc
- The 3 Best Android Apps to Catch Someone Unlocking Your Phone (7/2021 - 5/2022)

Possibilities to check apps for security issues

Some websites offer such services:

Android & iOS: Gratis-Werkzeuge zur Malware-Analyse (2/2014: ViaForensic's Santoku Linux)
Exodus Privacy for trackers in apps
MobilSicher.DE AppChecker
VirusTotal: more than just malware inside

2024-12-05

IzzyOnDroid