{"id":21377,"date":"2023-03-01T16:10:29","date_gmt":"2023-03-02T00:10:29","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2023\/03\/01\/news-15108\/"},"modified":"2023-03-01T16:10:29","modified_gmt":"2023-03-02T00:10:29","slug":"news-15108","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2023\/03\/01\/news-15108\/","title":{"rendered":"Crushing the two biggest threats to mobile endpoint security in 2023"},"content":{"rendered":"<p>Don&rsquo;t let their small size fool you: mobile devices can have a <a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/business\/what-is-mobile-security\">big impact on your security posture<\/a>. It&rsquo;s easy to see why, considering that almost <a href=\"https:\/\/www.verizon.com\/business\/resources\/reports\/mobile-security-index\/?cmp=knc:ggl:ac:ps:psao:na:8884610289&amp;utm_term=verizon%20mobile%20security%20index&amp;utm_medium=cpc&amp;utm_source=google&amp;utm_campaign=PublicSector&amp;utm_content=PublicSector&amp;ds_cid=71700000081860229&amp;ds_cid=&amp;gclid=Cj0KCQiA2-2eBhClARIsAGLQ2Rm41kGZ6p6awmxhLrM-0cT_OJQiegxTZD3bRCFjkZ-VKLqCcql7IfoaAhryEALw_wcB&amp;gclsrc=aw.ds\" target=\"_blank\"><strong>half of organizations<\/strong><\/a> said they suffered a mobile-related compromise in 2022.<\/p>\n<p>Malware and phishing are two particular mobile threats that you need to defend against in 2023. Just check out the following stats from last year:<\/p>\n<ul>\n<li><strong>18 percent of clicked phishing emails<\/strong> in 2022 came from a mobile device. (Verizon Mobile Security Index 2022)<\/li>\n<li><strong>46 percent organizations<\/strong> that had suffered a mobile-related security breach in 2022 said that <strong>app threats were a contributing factor<\/strong>. (Verizon Mobile Security Index 2022)<\/li>\n<li>9 percent of organizations suffered a<strong> mobile malware attack<\/strong> in 2022. (Check Point 2023 Cyber Security Report)<\/li>\n<\/ul>\n<p>In addition, <a href=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/01\/key-takeaways-from-malwarebytes-2023-state-of-mobile-cybersecurity-survey\">according to Malwarebytes research<\/a>,&nbsp;45 percent of schools reported that at least one cybersecurity incident last year started with Chromebooks or other mobile devices.<\/p>\n<p>In this post, we&rsquo;ll talk about the threat that phishing and malware pose to mobile endpoint security and how to crush them.<\/p>\n<h2>Mobile devices have a huge target on their backs<\/h2>\n<p>Mobile devices are a key part of today&rsquo;s modern business: <a href=\"https:\/\/www.zimperium.com\/global-mobile-threat-report\/\" target=\"_blank\">56 percent of employees<\/a> rely on at least four to eight enterprise applications on their mobile device.<\/p>\n<p>But wherever sensitive data exists, threat actors are out there trying to get their hands on it.<\/p>\n<p>The explosion of bring-your-devices (BYOD) policies during and after the pandemic created a large, new attack surface. <strong>Employees love mobile devices for their convenient access to corporate data systems; attackers love them for the same reason<\/strong>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/easset_upload_file6695_260720_e.png\" alt=\"\" width=\"1024\" height=\"768\" style=\"display: block; margin-left: auto; margin-right: auto;\" \/><\/p>\n<h2>Malware on Android<\/h2>\n<p>First things first, malware is a much bigger threat to Android devices than it is to iOS devices, as iOS malware is extremely rare.<\/p>\n<p>Malware&nbsp;on mobile Android devices comes in many forms, including adware, ransomware, trojan-banker (aka &lsquo;bankers&rsquo;), and trojan-dropper (aka &lsquo;droppers&rsquo;). Droppers, considered the &ldquo;most Trojan of Trojans,&rdquo; disguise themselves as innocent apps to steal personal and financial data.&nbsp;Droppers can install copies of themselves, and because they can drop software that downloads other malware, they can be used to establish a permanent gateway into a smartphone, and then into a business<\/p>\n<p><a href=\"https:\/\/try.malwarebytes.com\/2023-state-of-malware\/\">In our 2022 State of Malware Report<\/a>, Malwarebytes found that droppers accounted for 14 percent of detections on Android. Other malware is more widespread, but <strong>droppers pose the greatest danger to organizations<\/strong>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/easset_upload_file72572_260720_e.png\" alt=\"\" width=\"1024\" height=\"768\" style=\"display: block; margin-left: auto; margin-right: auto;\" \/><\/p>\n<p style=\"text-align: center;\"><em>Examples of recent Android malware<\/em><\/p>\n<h2>Phishing on iOS and Android<\/h2>\n<p>Phishing has always worked wonders for attackers, and if it ain&rsquo;t broke, don&rsquo;t fix it&mdash;including on mobile devices. In fact, <a href=\"https:\/\/www.zimperium.com\/global-mobile-threat-report\/\" target=\"_blank\">Zimperium <\/a>found the number of phishing sites that target mobile devices specifically has seen 50 percent growth from 2019-2021.<\/p>\n<p>Phishing attacks on Android and iOS range from email to banking, SMS (smishing), and even attempting to trick users into handing over legitimate two-factor authentication codes.<\/p>\n<p>Targeted phishing campaigns on enterprise mobile devices are common, with threat attackers often impersonating companies such as Apple, PayPal, and Amazon.<\/p>\n<h2>Mobile Device Management (MDM) ain&rsquo;t the solution<\/h2>\n<p>A common misconception that we hear when we talk about mobile endpoint security is that <a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/business\/what-is-mobile-device-management-mdm\">MDM <\/a>is the solution to all of our mobile malware and phishing woes.<\/p>\n<p>It&rsquo;s not.<\/p>\n<p>Mobile device management services only secure use of corporate data, but are not designed to counter threats such as malware and phishing on iOS and Android devices.<\/p>\n<p>Organizations should look beyond MDM platforms and toward mobile security products that use a variety of techniques, including behavioral analysis, to crush mobile threats. Some features of a robust mobile threat defense product include:<\/p>\n<ul>\n<li>24\/7 real-time protection against emerging threats<\/li>\n<li>Advanced antivirus, anti-malware, anti-spyware capabilities<\/li>\n<li>Malicious app protection<\/li>\n<li>App privacy audit<\/li>\n<li>Safe web browsing<\/li>\n<li>Block ads and ad trackers<\/li>\n<li>Filters suspicious fraudulent texts<\/li>\n<li>Spam call blocking<\/li>\n<\/ul>\n<h2>Malwarebytes makes mobile device security easy<\/h2>\n<p>With <a href=\"https:\/\/www.malwarebytes.com\/business\/mobile-security\">Malwarebytes Mobile Security for Business<\/a>, you can put a damper on mobile attacks on your organization in just a few clicks.<\/p>\n<p>In <a href=\"https:\/\/www.malwarebytes.com\/business\/cloud\">Nebula<\/a>, our cloud-hosted security platform made for small to large businesses (<a href=\"https:\/\/www.malwarebytes.com\/partners\/managed-service-providers\">OneView for MSPs<\/a>), all you have to do to get started is activate the endpoint agent for your mobile devices.<\/p>\n<p>From there, you set how your mobile endpoints behave by adding a new policy and selecting <strong>Web protection and Ad block<\/strong> for iOS and <strong>Behavior protection<\/strong> for ChromeOS and Android.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/easset_upload_file9713_260720_e.png\" alt=\"\" width=\"1438\" height=\"1048\" style=\"display: block; margin-left: auto; margin-right: auto;\" \/>Once you save this policy, you&rsquo;re set<strong>!<\/strong><\/p>\n<p>Admins gain immediate visibility into mobile device activity, enabling IT teams to easily identify and report malicious threats, PUPs, and PUMs.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/easset_upload_file7639_260720_e.png\" alt=\"\" width=\"636\" height=\"647\" style=\"display: block; margin-left: auto; margin-right: auto;\" \/><\/p>\n<p style=\"text-align: center;\">The Malwarebytes Mobile Security app on IOS (left) and Android (right)<\/p>\n<p style=\"text-align: left;\">The statistics don&#8217;t lie&mdash;phishing and malware pose a big threat to mobile endpoint security in 2023. But with a mobile threat defense solution like Malwarebytes Mobile Security, <a href=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/02\/introducing-malwarebytes-mobile-security-for-business-how-to-find-malware-and-stop-phishing-attacks-on-smartphones-and-chromeos\">you can crush threats like these and more<\/a>.&nbsp;Get&nbsp;a free trial and\/or quote below!<\/p>\n<p style=\"text-align: center;\"><strong><span style=\"color: #ffffff;\" class=\"blue-cta-bttn\"><a href=\"https:\/\/www.malwarebytes.com\/business\/contact-us\" style=\"color: #ffffff;\">Get a quote or free trial of Malwarebytes Mobile Security<\/a><\/span><\/strong><\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/crushing-the-two-biggest-threats-to-mobile-endpoint-security-in-2023\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<table cellpadding=\"10\">\n<tr>\n<td valign=\"top\" align=\"left\">\n<p>Categories: <a href=\"https:\/\/www.malwarebytes.com\/blog\/category\/business\" rel=\"category tag\">Business<\/a><\/p>\n<p>Protect your organization from mobile phishing and malware attacks.<\/p>\n<table width=\"100%\">\n<tr>\n<td align=\"right\">\n<p><b>(<a href=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/crushing-the-two-biggest-threats-to-mobile-endpoint-security-in-2023\" title=\"Crushing the two biggest threats to mobile endpoint security in 2023\">Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/03\/crushing-the-two-biggest-threats-to-mobile-endpoint-security-in-2023\">Crushing the two biggest threats to mobile endpoint security in 2023<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/www.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[1001],"class_list":["post-21377","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-business"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21377","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=21377"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21377\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=21377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=21377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=21377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}