Popular messaging apps like WhatsApp, Telegram, Teams, and Slack are posing new risks to mobile and web applications in businesses, according to the 2023 Enterprise Communication Risk Report from cybersecurity firm SafeGuard Cyber. Nearly half (42%) of organizations reported new security incidents related to employees using their own devices (BYOD) with messaging apps in work environments. The report also found that 66% of security incidents were related to temporary messages connected to cloud-based collaboration tools.
See also: How to unhide apps on iPhone
The report is based on exclusive data collected from the SafeGuard Cyber platform from January 2023 to October 2023.
Last year, researchers discovered the SpinOk malware in multiple Android apps that had been downloaded more than 30 million times. The apps with the malware were found in the Google Play, following an investigation by cybersecurity firm CloudSEK.
Attacks can start with a spam email and then, if successful, spread to other messaging apps like Slack or Teams. “From there, an attacker can use a social engineering like disinformation to break into the network and steal sensitive information.”
See also: Mac App Store: Fake ChatGPT apps in the app store
Malicious actors are not only operating in English, as cybercriminals are attacking victims via messaging apps, wherever they are, the report warns. SafeGuard Cyber monitored messages in more than 52 languages, with almost a quarter of the messages analyzed on WhatsApp being written in a language other than English.
According to the report, 42% of messages flagged for security or compliance issues occurred on WhatsApp, 24% on Telegram, 17% on Slack, and 17% on Teams. Additionally, 42% of flagged messages involved warnings that confused users, while 23% contained attachments that were identified as sensitive and violated regulatory compliance laws.
One of the best practices for using a messaging app securely is to always keep it up to date. Developers often release updates to fix security vulnerabilities and enhance the overall security of the app. By regularly updating your messaging app, you can ensure that you have the latest security patches and protections.
See also: Google Play: Popular file manager apps were spyware
Another important practice is to enable two-factor authentication (2FA) whenever possible. 2FA adds an extra layer of security by requiring you to provide a second form of verification, such as a unique code sent to your phone, in addition to your password. This helps prevent unauthorized access to your messaging app, even if your password is compromised.
Using strong and unique passwords for your messaging apps is crucial. Avoid using easily guessable passwords like 123456 or password. Instead, create complex passwords that include a mix of uppercase and lowercase letters, numbers, and special characters. Additionally, it is recommended to use a password manager to securely store and create strong passwords for all your accounts.
Be careful when sharing sensitive information through messaging apps. Avoid sharing personal information like your address, social security number, or financial information unless absolutely necessary. Even then, consider using end-to-end encryption or secure file sharing features provided by your messaging app to protect your data from unauthorized access.
Source: cybersecurityhub
