Mobile app not what it seems Published Nov. 5, 2013 By Airman 1st Class Janelle Patiño 92nd Air Refueling Wing Public Affairs FAIRCHILD AIR FORCE BASE, Wash. -- With new smartphones coming out almost every month, mobile applications are adding up as well. It is important to do a little research about an app before downloading or putting your information in it, especially military related ones. The Information Assurance office has some tips on how to make sure everything is safe when downloading any apps on a smartphone. "Users should only use apps they can get from their provider's or device's app store and make sure to read reviews about what they're downloading," said Senior Airman Nicholas Leggett, 92nd Communications Squadron Information Assurance manager. "Just taking a minute to Google the app and read an article on it is worth your time." The definition of a "malicious" app is spelled out in the Android Developer Content Policy as "Viruses, worms, defects, Trojan horses, malware, or any other items that may harm user devices or personal data," which means the ones that cause the most threat are apps that have a useful function that hide the malware. "For instance, there are messaging apps that take your entire contact list and upload it to a server, or navigation apps that upload your Global Position System location to a third party," said Leggett. Recently, a third party smartphone app called "MyPay DFAS LES" presents itself as an official Defense Finance and Accounting Service poses a cyber threat to members. "The app, not sponsored by Department of Defense or the U.S. Government, connects to DFAS on your behalf to access your myPay account and as many as 50,000 members are estimated to have installed the app," said Leggett. "Additional investigation has found similar apps for Android and iPhone as well." According to Leggett, to ensure mobile app safety, users can install anti-malware protection apps such as the free mobile safety apps McAfee and Norton. It's also helpful to make sure your smartphone's operating system and all apps are up to date. Also, checking the popularity of an app on the app store will help prove if an app is fake or not. If there are thousands of downloads but no reviews, or only five star reviews all posted in a short period of time, then that app has scammer written all over it. "If you have 'jail broken' your phone, a process used to allow the user greater control over their device, you are making it more vulnerable as well," said Leggett. "You are giving every app you download administrative rights or permissions to your phone." For more information about mobile app safety, call Senior Airman Leggett at 509-247-1034.