Indian organizations witnessed a staggering 845 percent increase in cyber-attacks on employees’ smartphones since October 2020, as remote working during the pandemic saw the mobile attack surface expand dramatically in the country, a new report said on Wednesday.
While the total number of mobile attacks on Indian organizations in October 2020 was 1,345, it reached 12,719 firms in March this year, according to the Threat Intelligence Report from cybersecurity firm Check Point.
In 2020, the researchers discovered a highly significant attack, in which threat actors used a large international corporation’s Mobile Device Management (MDM) system to distribute malware to more than 75 of its managed mobile devices.
Worldwide, 97 percent of organizations surveyed faced mobile threats that used multiple attack vectors last year.
While 46 percent of organizations among those surveyed had at least one employee download a malicious mobile application, at least 40 percent of the world’s mobile devices are inherently vulnerable to cyberattacks.
“As we have seen in 2020, the mobile threat landscape has continued to expand with almost every organization now having experienced an attack,” said Neatsun Ziv, VP Threat Prevention at Check Point Software.
With 60 percent of workers forecast to be mobile by 2024, mobile security needs to be a priority for all organizations, the report mentioned.
Almost every organization experienced at least one mobile malware attack in 2020.
“Ninety-three percent of these attacks originated in a device network, which attempts to trick users into installing a malicious payload via infected websites or URLs, or to steal users’ credentials,” the findings showed.
The research showed that at least 40 percent of the world’s mobile devices are inherently vulnerable to cyberattacks due to flaws in their chipsets, and need urgent patching.
“Threat actors have been spreading mobile malware, including Mobile Remote Access Trojans (MRATs), banking trojans, and premium dialers, often hiding the malware in apps that claim to offer Covid-19 related information,” the report said.