Full Report
Malwarebytes claims 44% of mobile users are exposed to scams every day
Analysis Summary
# Main Topic
44% of mobile users report being exposed to scams and threats on a daily basis, according to a Malwarebytes "Tap, Swipe, Scam" report covering users in the US, UK, Austria, Germany, and Switzerland. This exposure is creating a growing risk for enterprises that allow Bring Your Own Device (BYOD) policies.
## Key Points
- **Prevalence:** 44% of mobile users surveyed (1300 adults) experience scams or threats daily.
- **Concern:** The majority of users are concerned about losing important files and suffering productivity loss due to these threats.
- **Victimization:** 36% of respondents admitted to having fallen victim to a scam in the past.
- **Infection Rate:** Just under a fifth (36%) reported experiencing a malware infection on their mobile device.
- **Difficulty in Detection:** 66% of respondents found it increasingly difficult to distinguish scams from legitimate communications.
- **Relevance to Enterprise:** The high personal exposure translates to increased enterprise risk via BYOD environments.
## Threat Actors
- No specific threat actor attribution was mentioned in relation to the overall statistics provided in the context.
## TTPs
- **Delivery Vectors:** Threats arrive via multiple mobile-related channels:
- Email (65%)
- Phone calls (53%)
- SMS (50%)
- Social media (47%)
- Messaging apps (40%)
- Buying/selling platforms (36%)
- **Primary Method:** Social engineering was the most commonly encountered threat (53% of experiences).
- **Phishing Correlation:** This finding aligns with external studies indicating that 82% of all phishing sites now target mobile devices.
## Affected Systems
- **Platform:** Mobile users (smartphones/tablets).
- **Scope:** Affected users across the US (51% exposure risk), UK (49% exposure risk), Austria, Germany, and Switzerland.
- **Enterprise Impact:** Devices leveraging BYOD policies are indirectly affected, inheriting organizational risk.
## Mitigations
- **User Awareness:** A significant percentage of users find scams hard to spot, indicating a critical need for continuous education on identifying malicious communications.
- **General Security Posture:** Given the high rate of malware infection reports (36%), ensuring robust mobile security software is deployed and active is crucial.
- **Incident Response:** Organizations should prepare for productivity loss and data access issues resulting from successful mobile compromises.
## Conclusion
The data indicates a widespread and daily exposure risk for mobile users, largely driven by social engineering across diverse communication vectors. The high rate of user uncertainty regarding scam identification underscores the urgent need for enhanced security training and robust mobile endpoint protection solutions to manage enterprise risk stemming from personal mobile usage.