Patent attributes
Technologies for mobile device security are disclosed. A described technique includes launching a monitoring application that has a priority receiver attribute for a Short Message Service (SMS); receiving, within the monitoring application, a message from the SMS, the message being distributed to other applications on the mobile device; parsing the message to extract an originating address and message data; storing, in a data structure controlled by the monitoring application, the originating address and the message data; after a predetermined time interval, using the originating address and the message data stored in the data structure to determine whether the message has been stored in a non-priority client SMS database residing on the mobile device; and if the message has not been stored in the client SMS database, determining whether one or more applications other than the monitoring application that have the priority receiver attribute are associated with malicious activity.