1. A method of providing a honeypot function in a mobile communication network to protect the mobile communication network against malware, comprising: monitoring events corresponding to applications in at least one mobile device, the at least one mobile device being user-less and operatively connected to a mobile communication network; defining a set of anomalous variations in a state of said at least one mobile device, wherein the anomalous variations in the set of anomalous are indicative of said at least one mobile device being exposed to one or more risks of malware, the set of anomalous comprising: overwriting, by one of the applications, existing files of other applications; and re-executing one of the applications at a booting of said at least one mobile device; subjecting said at least one mobile device to the one or more risks by emulating a human-like interaction between a server and said at least one mobile device in accordance with said monitored events, wherein said human-like interaction comprises controllably performing, for the applications corresponding to said monitored events, a sequence comprising the steps of: i) installing an application on said at least one mobile device; ii) executing the application installed on said at least one mobile device; and iii) de-installing the application from said at least one mobile device; checking, after any of the steps performed in said sequence, the state of said at least one mobile device to detect if any of said anomalous variations in said set of anomalous has occurred in the state of said at least one mobile device; and issuing a malware alert message in response to a detection of at least one of the said anomalous variations.