The most common mobile cyber threats

What types of threats are the most common on mobile phones?

With the advancement of time and new technologies, cybercriminals find new and more sophisticated ways to attack users’ computers and devices. The development of mobile telephony and the use of smartphones has caused a new scenario in which hackers have billions of potential targets to carry out their attacks.

Attacks on mobile phones have increased exponentially in recent years, and according to data collected by the cybersecurity consultancy ProofPoint, there are around 100,000 attacks on this type of device every day.

Although the ways of proceeding of cybercriminals who attack mobile devices may be, to a certain extent, similar to attacks on computers and IT equipment, the particularities of mobile phones have led hackers to develop new strategies and techniques, adapted to deceive and defraud users of this type of device. Let’s see what some of the most used are.

The most used mobile malware

Mobile cyber threats are becoming more extensive and varied. In many cases, these threats coincide with those faced by computer users. Thus, it is common to see different types of malware on mobile phones such as:

• Ransomware : consists of the hijacking of a computer or device. Users are usually tricked into believing that they have a virus installed on their device and are prompted to download a program or app to remove it. Actually, the device did not have any problem and when downloading that app the mobile is infected. At that point, cybercriminals ask for a ransom to clean or unlock the terminal.
• Adware : consists of flooding the mobile device with advertising. Later we will see this problem in more depth, since it is one of the most common in mobile devices.
• Keyloggers – These are programs that record keystrokes. Thanks to this type of program, cybercriminals can detect what the user is typing and thus easily steal their credentials.
• Man in the middile attacks : In this case, cybercriminals seek to “infiltrate” as a kind of intermediary in the communication between one device and another. This is common for instant messaging services (although many have end-to-end encryption, hackers devise ways to circumvent their security measures).
• Phishing Malware – Phishing is one of the biggest risks for mobile phone users. Much of the malware is focused on phishing since, once the user’s identity has been spoofed, their credentials can be used for numerous malicious purposes (stealing bank accounts, making purchases, extorting the user, etc.).

In addition to these risks, there are many others that you should be aware of. Let’s see what are other of the main dangers for mobile security .

malicious apps

There is a large number of malicious apps focused on exploiting vulnerabilities in mobile devices . These types of applications are camouflaged under the guise of a real app, but in reality they can hide malware such as Trojans, keyloggers, adware and more. Once a malicious app is downloaded, the user is vulnerable to different types of risks, such as bank account theft, personal data leaks, and much more.

The banking Trojans

Banking Trojans are another of the most frequent attacks on mobile devices . This type of malware is focused on stealing credentials to carry out bank fraud. Cybercriminals use this type of malware, often combined with keyloggers, to steal users’ credentials and break into their bank accounts. As you can imagine, these types of banking Trojans give cybercriminals access to wreak real havoc on their victims. In addition, no banking entity is completely safe from this type of malware, and some are even designed to attack certain entities, as is the case with ‘Revive’, which mainly affects BBVA customers.

The Adware

Adware is one of the top mobile cybersecurity risks today. This type of malicious program constantly displays unwanted advertisements on the screen. At first, this can be just annoying, as they flood the screen with advertisements and make it extremely difficult to view the content. However, there are even more dangerous aspects, since in some cases when clicking on an ad, even inadvertently, a malicious app or program is downloaded to the mobile. Over time, this can lead to the phone being infected with a large number of viruses and Trojans, posing a security risk.

Fraudulent SMS

Fraudulent SMS are also related to the theft of bank accounts and credentials. In recent times we have witnessed a large increase in news related to the existence of fraudulent messages that urge the user to enter a URL to correct a debt, a non-payment or some incorrect movement in their account. Cybercriminals often impersonate well-known banking entities or even public administrations such as the Tax Agency. This type of mobile cyber threat can also occur through other services, such as instant messaging apps like WhatsApp or email.

Tips to improve the cybersecurity of your mobile

To tell the truth, attacks on mobile phones are going to continue to occur, and their frequency and intensity will probably even increase in the future. Although it is impossible to avoid mobile cyber threats, what can be done is to follow certain guidelines and behaviors to increase the security of mobile phones:

• Encrypt the information : currently the mobiles themselves and the apps have encryption options that allow the information to travel encrypted and secure.
• Install a good antivirus and malware cleaner : if we do it on the computer, why not on our mobile phone?
• Update operating system and apps : many times we put aside these updates because they are heavy or inconvenient. But the reality is that these updates usually come with security improvements.
• Turn off what you don’t use : Why have Wi-Fi or Bluetooth turned on when you’re not using it? They are open doors for the entry of threats.
• Avoid open public networks – One of the most common methods cybercriminals use to access third-party mobile devices is hacking public networks with low security levels.
• Be careful with the permissions you grant : when installing any app, it asks for a series of permissions that, sometimes, we don’t even bother to read. This can cause them to access information that is not necessary for the operation of said app, or even compromised. Imagine the danger that this can pose if it is a fraudulent app.
• Make backup copies : and periodically save all your information on external devices.
• Download only official apps : avoid downloading mobile applications of unknown origin. Research the providers of the apps and download them only from services such as Google Play, App Store or from the official pages of the providers.
• Do not trust unknown messages : if you do not know the origin of an SMS or an instant messaging message, it is best not to touch them.
• Use strong passwords – If possible, you should use a fingerprint or other biometric method to unlock your mobile phone. If you use a password, it should be as long as possible and contain a mix of alphanumeric characters.

In short, mobile threats are here to stay, which is why it is increasingly important that users of these devices become aware of the importance of protecting our phones