The latest report summarizes mobile threats recorded from July 1 to September 30, 2017, for device risks, network threats, and app malware, click bots, and privacy abuse. Data in the “Zimperium Global Threat Report” is initiated by Zimperium’s mobile security and mobile threat defense technology, z9, on enterprise customer devices. The threat detection is delivered via the zIPS mobile security app or the lightweight zIAP SDK for mobile app developers. zIPS and zIAP enable companies to detect threats to mobile devices in real-time, so attacks on a mobile device are terminated and won’t advance beyond the targeted device.

2. 1All Rights Reserved © 2017
Source: 2017 Mobile Security Spotlight, Zimperium, Inc.

3. 2All Rights Reserved © 2017
BroadPwn
M o b i l e T h r e a t s A r e R e a l …

4. 3All Rights Reserved © 2017
BankBot
M o b i l e T h r e a t s A r e R e a l …

5. 4All Rights Reserved © 2017
KRACK
M o b i l e T h r e a t s A r e R e a l …

6. 5All Rights Reserved © 2017
Mobile OS is Constantly Changing
Source: CVE.Mitre.org. CVEDetails.com: Android and iOS CVEs
0
100
200
300
400
500
600
700
800
900
1000
2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017
CVE Score 7+
CVE Score 1-6
Windows 10
Through
Sept 2017
CVEs

7. Malicious App

8. 7All Rights Reserved © 2017
Install app from
third party store
App
Exploit executed
App
Used as weapon
to internal network
Leak data
Malicious App
M o b i l e T h r e a t s A r e R e a l …
Permissions abuse
App
ALLOW

9. 8All Rights Reserved © 2017
Malicious App
M o b i l e T h r e a t s A r e R e a l …
0% 1% 2% 3% 4% 5%
Malicious Android Apps
Malicious iOS Apps
Source: Zimperium Global Threat Intelligence

10. Device
Configuration
Changes

11. 10All Rights Reserved © 2017
Consultant that goes in and
out of client networks
client1_wifi
client2_wifi
client3_wifi
client4_wifi
Doesn’t like client network
restrictions on-site
client3_wifi
CONNECTED!
Installs “free” VPN profile
to bypass restrictions
Installs SSL cert to encrypt
/ decrypt device traffic
SSL CERT
All company data is
decrypted to the hacker
iOS Profile
M o b i l e T h r e a t s A r e R e a l …

12. 11All Rights Reserved © 2017
Unnecessary Device Risks
M o b i l e T h r e a t s A r e R e a l …
0% 10% 20% 30% 40% 50% 60% 70%
Malicious Profiles
Extreme Risk Configuration
High Risk Configuration
Vulnerable Devices
Source: Zimperium Global Threat Intelligence

13. Network
Attacks

14. 13All Rights Reserved © 2017
At a coffee shop
near an office
coffee_wifi
CONNECTED!
Redirect to phishing page
LOGIN
Data exploit
Access to
corporate data
Wi-Fi MITM
M o b i l e T h r e a t s A r e R e a l …
Wi-Fi MITM

15. 14All Rights Reserved © 2017
Source: Zimperium Global Threat Intelligence
Wi-Fi MITM
M o b i l e T h r e a t s A r e R e a l …
0% 1% 2% 3% 4% 5% 6% 7% 8% 9% 10%
Rogue AP
SSL Strip
MITM Attacks