Obtaining mobile terminal security information based on a cloud service includes synchronizing mobile terminal information with a cloud, receiving security information sent by the cloud, and performing corresponding security processing according to the security information. The security information is generated when the cloud determines that a security risk exists in a mobile terminal. The generated security information is sent by the cloud to the mobile terminal. Whether the security risk exists in the mobile terminal is obtained by the cloud through determining with reference to the mobile terminal information and latest security data of the cloud, and the determining step is triggered by updating of security data of the cloud.