A new report from Zimperium shows that 82% of phishing websites now target mobile devices.
The “2024 zLabs Global Mobile Threat Report” highlighted the increased risk for mobile devices, while warning that 76% of these websites use HTTPS and thus more easily deceive users, since they appear secure.
The past year has also seen a surge in new unique malware samples (up 13% year-over-year), with riskware and trojans accounting for 80% of threats. Healthcare is the industry most targeted, with 39% of mobile threats coming from phishing attacks.
See also: Phishing platform iServer taken down by authorities
Cybercriminals exploit weak mobile endpoints, as smaller screens and limited security indicators allow them to more easily deceive victims.
“It’s undeniable that mobile devices and apps have become the most critical digital channels to protect,” said Shridhar Mittal, CEO of Zimperium. “In today’s digital age, where 71% of employees leverage smartphones for work, organizations must effectively protect mobile endpoints by adopting a multi-layered security strategy, including mobile threat defense and mobile app control.”
See also: SambaSpy Malware: Targets Italian users with phishing emails
Phishing and Sideloading: Two Major Risks
As previously mentioned, the report highlighted the risk of phishing for mobile devices. Researchers observed that nearly a quarter of phishing websites targeting mobile devices are activated within 24 hours, operating under the radar of traditional detection methods.
On the other hand, sideloading, or downloading apps from anywhere other than official stores, is also a risk for businesses. Financial services are particularly vulnerable, with 68% of threats linked to sideloaded apps. According to the report, users who download apps from unofficial stores are 200% more likely to infect their device with malware.
See also: DOJ charges Chinese engineer with spear phishing against NASA
Ways to protect mobile devices
Set a strong password or PIN: This is the first line of defense for your mobile device. Make sure you set a unique and complex password or PIN that is difficult for someone to guess.
Keep software and apps up to date: Regularly updating the operating system and apps on your device can help fix any security vulnerabilities.
Enable biometric authentication: Most smartphones have biometric authentication, such as a fingerprint or facial recognition, which provides an extra layer of security.
Use a virtual private network (VPN): When connecting to public Wi-Fi networks, use a VPN to encrypt your internet traffic and prevent hackers from eavesdropping. Ideally, don't connect to public Wi-Fi networks.
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Be careful with suspicious links and downloads: Avoid clicking on links or downloading attachments from unknown sources, as they may contain malware that can compromise the security of your device.
Install antivirus software: Just like on a computer, installing antivirus software on your mobile device can help you detect and remove any malware.
Back up important data: Regularly backing up your data ensures that you have a copy in case your device is lost or stolen.
Source: www.infosecurity-magazine.com
