{"id":78517,"date":"2024-05-27T15:32:33","date_gmt":"2024-05-27T07:32:33","guid":{"rendered":"https:\/\/version-2.com\/?p=78517"},"modified":"2024-05-21T15:35:10","modified_gmt":"2024-05-21T07:35:10","slug":"employee-smartphones-a-pack-of-risks-in-a-pocket-how-to-minimize-your-business-attack-surface","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2024\/05\/employee-smartphones-a-pack-of-risks-in-a-pocket-how-to-minimize-your-business-attack-surface\/","title":{"rendered":"Employee smartphones, a pack of risks in a pocket. How to minimize your business\u2019 attack surface"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>

With proactive prevention, companies can mitigate threats from mobile devices before they can do wider harm.<\/em><\/p>

When intelligence services were trying to infiltrate companies or institutions during World War II and the Cold War, they needed to come up with some very smart ideas. They disguised cameras as coat buttons, hid transceivers in suitcases, and even tried to create a robot dragonfly with a microphone!<\/p>

Today, when people want to snoop and get around a company\u2019s defenses, they just need to get inside your employees\u2019 smartphones. Nearly everybody has one, and many are casual about their security. Though it\u2019s true that it is rare to see malware spreading from a phone to company laptops, a compromised phone is still a threat if it is connected to the company\u2019s internal network or when attackers steal an employee\u2019s credentials, sensitive corporate data, or banking information.<\/p>

Considering how small those devices are, the threat landscape they create is disproportionally huge: A single phone contains several devices, such as a camera, microphone, and GPS tracker, but what is even more serious is that these components and many of the applications hosted on the phone can be abused to steal sensitive information from employees and to serve as an initial attack vector for cybercriminals to further harm a company.<\/p>

Some businesses deal with this by using mobile device management (MDM), imposing strict rules on their corporate devices and allowing employees to use only a handful of apps. However, most businesses are either small or midsize, and their security may struggle to keep enforcement tight.<\/p>

ESET researchers could write books about malware that threatens smartphones and its potential harm to businesses. That is why ESET, a global leader in cybersecurity, has introduced ESET Mobile Threat Defense<\/a> (EMTD) as a part of its latest B2B offering.\u00a0 To improve their prevention capabilities, users of ESET PROTECT Advanced and higher can now enjoy one free mobile device seat per one paid seat for other devices.<\/p>

Shortly after the successful launch of the ESET\u2019s Mobile Threat Defense module, ESET was included in Forrester\u2019s Mobile Threat Defense (MTD) Solutions Landscape report, Q1 2024<\/a>. Forrester, a respected analyst firm, provides an overview of 16 vendors in the field, including ESET, which, in our opinion, makes ESET a valuable player in this established market.<\/p><\/div>

What threats are out there?<\/h3><\/header>

From the beginning of 2020 until the end of 2023, Android malware detected by ESET telemetry rose by 222%.<\/p>

For example, last year, ESET researchers discovered two active campaigns targeting Android users distributed across several app stores and dedicated websites.<\/p>

The threat actors patched the open-source Signal <\/a>and Telegram apps<\/a> for Android with malicious code that ESET researchers have identified as BadBazaar. The malicious apps went by the name Signal Plus Messenger and FlyGram, and their purpose was to exfiltrate user data, such as contact lists, call logs, and the list of Google accounts.<\/p>

Signal Plus Messenger is even more dangerous than FlyGram with its unique capability to spy on the victim\u2019s communications<\/a> in the original Signal app. Such sensitive information could be used for further spear phishing attacks against business officials.<\/p><\/div>

\u00a0<\/div><\/div><\/div><\/div>

A similar case was covered in June 2023, when ESET researchers identified an updated version of Android GravityRAT<\/a> spyware. It was distributed within the malicious but functional messaging apps BingeChat and Chatico, which were both based on the OMEMO Instant Messenger app. This particular spyware can exfiltrate call logs, contact lists, SMS messages, the device location, basic device information, and files with specific extensions, such as jpg, PNG, txt, pdf, etc.<\/p>

And this is just the beginning. Smartphones can be attacked in numerous ways that put companies\u2019 finances and data in danger, such as through banking trojans, phishing, vulnerabilities, or physical theft.<\/p>

A similar case was covered in June 2023, when ESET researchers identified an updated version of Android GravityRAT spyware. It was distributed within the malicious but functional messaging apps BingeChat and Chatico, which were both based on the OMEMO Instant Messenger app. This particular spyware can exfiltrate call logs, contact lists, SMS messages, the device location, basic device information, and files with specific extensions, such as jpg, PNG, txt, pdf, etc.<\/p>

And this is just the beginning. Smartphones can be attacked in numerous ways that put companies\u2019 finances and data in danger, such as through banking trojans<\/a>, phishing<\/a>, vulnerabilities<\/a>, or physical theft<\/a>.<\/p><\/div>

SMBs are more vulnerable<\/h3><\/header>

Small businesses are often considered to be the backbone of national economies. In the United States, small businesses (defined as businesses with up to 500 employees) comprise 99.9% of all American businesses. <\/a><\/p>

Authorities <\/a>in the United Kingdom define small businesses as those with 10 to 49 employees and medium businesses as those with 50 to 249 employees. Similarly, more than 99% of all U.K. businesses<\/a> are small and medium-sized businesses (SMBs).<\/p>

Being cheaper and simpler to manage than issuing business devices, a Bring Your Own Device (BYOD) policy is often the number one option for SMBs. Some may also take a hybrid approach<\/a>, providing corporate devices only to chosen employees. Without proper security, this comes with risks.<\/p>

Of companies opting for BYOD, 48% say they have seen malware introduced through an employee\u2019s personal phone, and just 4 out of 10 have MDM deployed, according to a Samsung 2023 survey<\/a>.<\/p>

And human error is a huge factor. Several recent studies<\/a> show that more than 80% of data breaches<\/a> involve a human element. Specifically, the most common mistakes contributing to cyber incidents are employees\u2019 poor password hygiene and misuse of personal email.<\/p>

However, we are not here to put the blame for every cyber incident on an average employee; after all, IT professionals can make some of the most common mistakes too. For example, half of them admitted to reusing the same password in a Ponemon Institute 2020 study<\/a>.<\/p>

Moreover, SMBs are less eager to invest in employee training, according to a survey<\/a> conducted by the U.K. Department for Science, Innovation and Technology in 2023. For example, only 28% of surveyed small businesses conducted awareness training, in comparison with 77% of large businesses.<\/p>

The same survey found that SMBs often also lack properly educated senior managers: \u201cAlthough we have senior managers who are good at the role, they don\u2019t have awareness in cyber security. I try to ensure they have a basic understanding, training, and knowledge in it. But they are focused on the day-to-day,\u201d said one of the participating human resources administrators working for a medium business.<\/p><\/div>

Target mobile threats to minimize attack surfaces<\/h3><\/header>

Considering these threats, implementing MDM is a huge step forward. For example, ESET Mobile Threat Defense <\/a>gives administrators the option to monitor and control applications for both Android and iOS. EMTD is part of ESET\u2019s cloud and on-premises unified management console ESET PROTECT<\/a>, so no additional management console is needed.<\/p>

With endpoint protection included, EMTD also provides antivirus and anti-phishing features, giving businesses more cyberattack prevention capabilities.<\/p>

Both are also necessary when opting for a Zero Trust<\/a> approach, an increasingly popular strategy<\/a> in which the company verifies every account or device before allowing it to connect to its network.<\/p>

See these ESET Mobile Threat Defense key capabilities and features:<\/p>