Mobile Device Attacks You Need to Watch Out For

Mobile Device Attacks You Need to Watch Out For

Mobile device security has become an increasingly important issue in recent years. With smartphones and tablets being used for everything from banking transactions to online shopping, businesses must take steps to ensure that their data remains secure.

Microsoft estimates that up to 80% of the workload in many organisations is now done via mobile devices. Over half of all web searches are also conducted via a mobile device rather than a desktop.

Mobile devices have become a more attractive target for hackers in recent years, as they realise that these devices often contain the same sensitive information and app access as desktops. As a result, mobile malware and other exploits are being created to breach these devices.

It’s important to start treating mobile devices with the same level of security as you would computers. This includes:

• Antivirus/anti-malware protection
• DNS filtering
• Automated OS and app updates
• Managed backup

You need to be vigilant for the most common mobile device threats that could lead to data leakage or breaches. Here are some of the most prevalent mobile devices threats:

Mobile Malware Hidden in Apps

There are several different ways that malicious software can attack mobile devices. These threats range from malware designed to steal personal information to ransomware that locks up your files until you pay a ransom.

It can be tricky to tell the difference between a legitimate free app and one that has malware hidden inside. Scammers will use similar types of flashy graphics, and the app may even have a high star rating which may be boosted through suspicious means. The app will usually function as it was intended to and will not seem out of place. However, there will be malware hidden in the background, infecting a device as soon as the app is installed. Many of these malware programs will be hidden in your devices by using the icon of a common default system app like settings or calendar.

Avoid installing unknown or non-official apps where possible. Always check the owner or developer of the apps before installing.

Unprotected Communications

Do you ever send passwords or credit card details over text messages or messaging apps? Did you check if the communication was encrypted?

Sending sensitive information over unencrypted channels is a risky proposition – a hacker could easily intercept and access that data. Always check to see if your communication is encrypted before sending sensitive information.

Public Wi-Fi & Man-in-the-middle Attacks

Although public Wi-Fi is notoriously insecure, people continue to use it when it’s available, whether to save on mobile data or get a faster connection. In fact, 75% of people admit to connecting to email on public Wi-Fi. Other activities people commonly do on public Wi-Fi include signing into apps including sensitive ones like online banking and shopping online which includes entering credit card details. This makes public Wi-Fi a high-risk environment for a man-in-the-middle attack, where a hacker connects to the same network and looks for victims with unprotected communications.

If you want to stay safe when using public Wi-Fi, one way to do so is to use a VPN app. This will encrypt your communications and protect your information.

Juice Jacking on Public USB Charging Stations

Another danger of public mobile breaches is public USB charging stations. These are available in public places for convenience, especially for those who are low on battery power. Hackers can infiltrate public USB charging ports with malware and/or set up fake charging stations in public areas. When you unsuspectingly insert your USB cord to charge your device, the malware is copying all the data on your phone and/or infecting it with malicious code. USB cables can be used for data transmission while charging and not everyone is aware of this.

It is always best to charge your devices with your personal power adapter that plugs into an outlet. However, if USB charging is your only option, make sure to buy a “charge-only” USB cord to use. This will help avoid any potential problems that could come from using public USB charging ports. Alternatively, carry your own power bank if you foresee the need to charge when you are outdoors.

Non-Updated Devices

Almost half of all Android devices are running outdated operating systems that no longer receive vital security updates. This makes it easier for hackers to exploit code vulnerabilities in the OS or in installed apps. Yet many companies are not paying attention to how many of their employees’ work devices are running current operating systems, putting their networks at greater risk of a breach. You should ensure that all your apps and your OS are kept up to date, as many of these updates include critical security patches.

Mobile Devices Security Solutions

As mobile devices increasingly handle more of the computing workload, it is becoming increasingly important to make sure they are properly protected. Reach out to us on 1300 440 444 to discuss how to secure your mobile devices and enterprise security solutions for mobile devices.