You don't have to be Google, NBC or Steve Jobs's cousin to get your logo placed on one of the most coveted pieces of real estate on the planet, the main screen of Apple's iPhone. Now anyone can do it for about the cost of phone service for a month. 

When we first wrote about the iPhone a year ago (here), we created a fake picture of it with a Wells Fargo logo superimposed on the main screen (see inset). At that time, we would never have guessed that a year later Apple would enable any website to create an iPhone main screen icon by simply dropping a line of code into their website. 

It's as simple as creating favicons, those little symbols that appear next to your URL in the browser address bar. Here's a simple 25-word explanation of how to do it. For more info, consult the Apple iPhone Dev Center here.

Once you have the code installed, users with updated iPhone software will be able to install your icon by navigating to your page, clicking on the plus button at the bottom of the screen, and selecting "Add to Home Screen."

Last week, we received a tremendous comment/question from one of our readers, an officer in the risk-management department at a very large U.S. financial institution. His question, “I may have overlooked it, but did not see too much discussion around mobile banking fraud threats, such as mobile malware and smishing. Are these threats real? If so, what controls are financial institutions putting in place to mitigate these risks? Are there other mobile banking risks on the horizon?” 

That's a great question. Yes, threats of malware are real, and I expect to see the number of attacks grow exponentially greater over the next 18 months. However, so far only a handful of attacks have been recorded. See Wikipedia for a listing of mobile viruses.

The next question, “What controls are financial institutions putting in place?” The majority of financial institutions with mobile banking are using a vendor product; therefore, they are relying on the tools built in to the solution. In my previous entry on the subject (see Mobile Banking), I explained that after reviewing solutions from numerous vendors I believed they all had done a top-notch job making information security the number one priority. So, unless you are going to follow Bank of America and Wells Fargo down the path of an in-house WAP solution, you should find that the vendor has already addressed the issue on your behalf (see note 1).

That said, there is one HUGE security risk not receiving the attention it deserves and that is – THE CUSTOMER. As with online banking, the most critical element in reducing fraud is to simply educate the customer. Education can take a number of forms, including awareness campaigns, security checklists, recommended settings, and providing examples of how other clients have been deceived.

One good resource is the Microsoft page:  

Also, there are a number of companies already providing mobile antivirus security software including (note 2):

Bullgard
MyMobiSafe
Symantec
UMU
AirScanner
Kaspersky
F-Secure
Trend Micro

And as my Apple friends already know, the iPhone utilizes the OS X platform. While there is no guarantee, the accepted belief is that viruses are not an issue for Apple and that security software is not needed (note 1).

I hope this provides a better understanding of the mobile security environment. I encourage others to comment or send questions.

Notes:
(1) This is an opinion and not an implied guarantee of security or performance.
(2) This is in no way an endorsement of the product(s) or guarantee of performance. These were the top search results for the keywords “mobile antivirus security.”