Can double-spends be automated by malicious custom bitcoin clients? Say a malicious mobile bitcoin client is created, programmed to quickly send two or more double-send transactions whenever a payment is made.  

Is this an attack vector we should be concerned of?
What could be done in order protect against such an attack?
What could be done in order protect against such an attack?


Wait for N confirmations before accepting a payment as successful.