Mobile Phishing Attacks Targeting the Financial Industry Has Increased by 125% in 2020
According to the researches, although there has been %50 of increase in the usage of mobile device management (MDM)in the last year, it is stated that when looking at past three months the Phishing Attacks towards to the mobile devices in the finance sector it’s %125 and exposure to the malware and apps risk has increased of more than fivefold.
As more users access cloud services and infrastructure from mobile devices today, they are deliberately targeting phones and tablets to increase the chances of attackers finding a vulnerable entry point. Even just one successful Phishing or mobile ransomware attack can have access to a companies datas that is in its all infrastructure. Accessing to the datas can be done in a various ways, however an attacker can find its own way with each of them to access your cloud infrastructure. Attacker can recreate the corporate sign-in page and can send a phishing attack message to the person who wants to sign in to its account. Attacker can use a malware that is able to hide in the background of the device and wait for the user to reach its sensitive corporate datas that are stored in the cloud apps or its infrastructure before taking any action.
In the report of Financial Services threat that is written by Schless;
• Approximately %50 of the reason of Phishing Attacks was to stole the corporate login id informations.
• Approximately %20 of the mobile bank customers had a malware in their devices while they were trying to login their personal mobile bank app.
• Seven months after the release of iOS 14 and Android 11, 21% of iOS devices were still running iOS 13 or earlier and 32% of Android devices were still running Android 9 or earlier.
It is necessary to be done more than manage mobile phones with MDM. As MDM provides management of the mobile devices that fundamental apps and access management policies run, it can not provide protection against phishing attack and app risks.
It should be installed without requiring any mobile security capabilities, additional software upload. Every corporate should have the zero trust approach as well and consider the mobile apps, devices and users as part of this strategy.
It became obligatory to integrate mobile devices into zero trust strategy because of the big portion of the labor still work remotely. It is detected in the researches made that mobile device users reach Office 365, Google Drive or Adobe such cloud services during phishing attacks. The attackers realized that mobile devices are as valuable as desktop computers for reaching data and critical apps.
- Turn Back
- 4 min reading
-
Securvent
INVENTIV BLOG
Related Articles
Securvent
RxSwift and Reactive Programming
Daha Fazla
Securvent
Attackers Imitate WhatsApp Voice Message Warnings to Steal Information
Researchers have discovered that attackers imitate message notifications that comes from WhatsApp of a malicious phishing attack that uses a legitimate domain to spread out a malware who steals…
Daha Fazla
Securvent
Which Programs To Use For Data Security?
Every computer you have in your house or work should have an antivirus program. Event though the effectiveness of the antivirus programs is debated, this should be thought as a simple hygiene rule.
Daha Fazla
Securvent
What is KVKK? Things to know about KVKK (Episode-2)
In the 2nd part of our article, you can access the details of the purpose, scope and law of KVKK.
Daha Fazla
Securvent
What Is Penetration Test?
What is an infiltration test, penetration test, pentest? Why do we need infiltration tests? How often should you have the penetration test for the safety of your systems, software and sensitive…
Daha Fazla
Securvent
Cybersecurity Trends and Emerging Threats in 2021
2021 is finally here and it brings a more bright future along with however we have long way to go. In this episode, we will review the five cybersecurity threats that creates prominent potential risk…
Daha Fazla
Securvent
How To Adapt to KVKK?
With the KVKK Law, it has been made compulsory to protect all information technology systems containing personal data against any unauthorized access threats that may come over the internet.
Daha Fazla
Securvent
Trust Stamp Obligation on E-Commerce Sites
The trust stamp clearly indicates the existence of a “minimum security and service quality standard”. The Trust Stamp is described as “The electronic sign given to the service provider and…
Daha Fazla
Securvent
What to Consider When Choosing Penetration Test Firm?
Experience and ability are the indispensable of a penetration test. Specialists who will perform the penetration test should be talented, have the deep knowledge of the sector and all required…
Daha Fazla
Securvent
What is phishing?
In such attacks, the attacker imitates a real company to get your login information. It sends you an e-mail to get your account information and directs it to a fake web page.
Daha Fazla
Securvent
5 Simple Methods to Provide Data Security on Your Business
The answer to the question of what is data safety in institutions and we have compiled 5 different methods that you need to apply for 5 different methods for you.
Daha Fazla
Securvent
Why We Should Perform Penetration Tests with Different Firms?
The most frequently mentioned reason in the change of the companies that perform penetration tests is to give a “new perspective to the test.
Daha Fazla
Securvent
Ransomware : To Pay or Not ?
The face of the disaster has changed. Ransomware cyber attacks have become a threat that is increasingly common for the small and medium scale merchants. Schulze and James R. Slaby, explain that why…
Daha Fazla
Securvent
What Is Cyber Security?
We will briefly explain what happened from the eyes of the expert related to cyber security.
Daha Fazla
Securvent
What is KVKK? Things to know about KVKK (Episode-1)
KVKK means the law of protection of personal data. What is KVKK, when it came into force, the purpose and scope of the law is the answer to the questions you can find in this content.
Daha Fazla
Securvent
What Is Data Security?
Thera are thousands of cyber attack methods that would cause losing all of your datas or some of them, which are the most valuable assets of your organization. By this reason providing the data…
Daha Fazla
Securvent
Working From Home and Cyber Security Precautions
Even years later, when it comes to 2020, everyone will think of Covid-19 or Corona virus, which we all know.
Daha Fazla
Securvent
Conti Malicious Software Activities Is Increasing
Daha Fazla