I've read quite a few articles that said that your mobile phone doesn't really need security apps. However, after looking at this thread: What is your Mobile security setup these days? | Wilders Security Forums I just had to start this one. Any help would be appreciated.
I think that word "need" is key in this question, and type of threat you are realistically facing. My take for most users: Technically? not really Legally (i.e. phone used for bussiness or banking)? Maybe Psychologically? It may serve as a safety blanket or fulfill some need caused by curiosity I would advise to get familiar with built-in security features of your phone first, try some apps later if ever
so i do. my samsung only has google play protect, my xiaomi has (unwanted) "powered by" avast inside, its their own security/cleaner/whatever surveilance app, no uninstall possible. but it do not bother me. the only addition on both phones is adguard premium, 99% no ads, also not in ad sponsored apps.
Although, I have heard of phones getting malware. Even when my current phone was new and I had just opened it and set it up, one of the earliest apps that I downloaded was a weather app, and it immediately caused my phone to go haywire. Although fortunately, I was able to quickly reset my phone without really losing anything. Therefore, how does malware like that infect one's phone?
Bitdefender is a good choice, I've been running it alongside Mullvad for quite a while now and am quite happy with the combo.
Personally I don't feel the need to use antiviruses. Android phones already have Play Protect. Some manufacturers such as Samsung, Xiaomi, Huawei and some others, already include an antivirus in their customised version of Android.
Unless it is state sponsored attack then it is most likely user installing malware or buying already infected device. In case of updated, not-yet-infected device user usually needs to give that app high privileges i.e. device admin, Accessibility, notification service, Display over other apps, install unknown apps, SMS. On the West state sponsored attacks are targetted against handful of people. Average Joe Doe should be much more concerned against regular malware attacks which, as I already said, are conduced by decepting user into installing malware themeselves. Not every phone misbehavior is caused by malware. Sometimes it is just some regular bug. Example: Legitimate MS Teams caused inability to phone emergency numbers. If you are one of those users who install many apps without giving it much a though, and give them high privilages then maybe AV will prevent some infection. On the other hand AVs are always at least one step behind malware developers, so you will catch malware eventually regardless of AV usage
99% times it is a fake app given permissions by the user. For example you download a weather app, but it asks a permission to access user's files, that should alert the user! But most people simply allow everything, thus they need AV.
Mostly depending on OS. Apple devices are less prone to infection than Androids due to the isolated OS structure. However this does not mean that Apple devices cannot be exploited. I think good DNS filtering and a VPN service on top of that will improve your sleep.
