5 most common mobile phishing tactics

guest · Apr 18, 2020

5 most common mobile phishing tactics
April 17, 2020
https://cybersecurity.att.com/blogs/security-essentials/mobile-phishing

Phishing attacks are effective and simple to launch, and used by financially motivated attackers as well as more targeted attacks. In the case of a targeted attack, it may harvest login credentials to gain access to corporate or personal resources.

Yet as concerning as phishing may be, an emerging risk is not even realized by CISOs or their end users: phishing is increasingly targeting users on their mobile devices.
Phishing has moved to mobile
Most think “email” when they hear the word “phishing” but it is different on mobile. Mobile phishing extends beyond email to SMS, MMS, messaging platforms, and social media apps. Attacks are technically simple but novel in their approach. They seek to exploit human trust along social networks using personal context.

Employees also find it easier to perform tasks on a mobile device than on a desktop. Depositing checks via mobile banking app, for example, is simple, fast, and convenient, and there are many other examples like this.
Click to expand...

Most common mobile phishing tactics
There are several techniques that cybercriminals use to make their phishing attacks more effective on mobile. Below are some of the more commonly used tactics that Lookout has observed in the wild:

• URL padding is a technique that includes a real, legitimate domain within a larger URL but pads it with hyphens to obscure the real destination.
• Tiny URLs are shortened URLs that can be used by attackers to direct a user to malicious content.
• Screen overlays enable an app to replicate the login page of a legitimate mobile app in order to capture a user's authentication credentials.
• Mobile verification refers to code that is embedded in phishing sites and is designed to verify that the device accessing the link is a mobile device. This implies that the attacker confirms that the target is mobile in order to deploy a mobile-specific attack.
• SMS spoofing using over-the-air (OTA) provisioning is a mobile phishing attack where a bogus text message tricks a user into clicking a link.
Click to expand...

Log in or Sign up

5 most common mobile phishing tactics

guest Guest

Log in or Sign up

5 most common mobile phishing tactics

guest Guest

Useful Searches