Just one mobile phishing attack could cost your business hundreds of millions

(Image credit: Shutterstock)

New research from Lookout has revealed the danger that mobile phishing attacks pose to enterprise organizations where many employees are given company smartphones for work.

The firm's 2020 Mobile Phishing Spotlight Report shows that unmitigated mobile phishing threats could end up costing organizations with 10,000 mobile devices as much as $35m per incident and up to $150m for organizations with 50,000 mobile devices.

The report also revealed that there was a 37 percent increase worldwide in enterprise mobile phishing encounter rates between Q4 2019 and Q1 2020. North America saw the highest increase at 66.3 percent followed by the Asia Pacific region at 27.7 percent and a 25.5 percent increase in EMEA.

Mobile phishing

The number of people working at home is at a record high and employees have turned to their smartphones and tablets in order to stay productive. While organizations have deployed user training and email phishing security to combat cybercriminals' phishing attacks, little thought as been given to the threat of mobile phishing.

With mobile devices, phishing risks no longer simply hide in emails but can be found in SMS, messaging apps and social media platforms. Additionally, as mobile devices have a smaller form factor and a simplified user experience, they make it harder to spot the signs of a phishing link which increases the likelihood of a successful attack.

In a press release, program vice president of enterprise mobility at IDC, Phil Hochmuth explained why phishing has become a greater threat in a mobile-first world, saying:

Phishing has evolved into a massive problem that expands far beyond the traditional email bait and hook. On a small screen and with a limited ability to vet links and attachments before clicking on them, consumers and business users are exposed to more phishing risks than ever before. In a mobile-first world, with remote work becoming the norm, proactive defense against these attacks is critical.”

Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Latest in Security
person at a computer
Many workers are overconfident at spotting phishing attacks
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Latest in News
European Union technical background
EU tech companies push for digital sovereignty, reducing reliance on US and others
Star Wars Knights of the Old Republic
Knights of the Old Republic remake developer Saber Interactive states all its projects are 'still in development'
google nest
Google is slowly phasing out its Assistant helper to make room for Gemini's reign in smartphones - here’s how it’s doing the same for smart home devices
Renault 5 Turbo 3E
Renault unveils its wildest EV to date and it comes with in-wheel motors and a rally-style vertical handbrake for drifting
Circular smart ring
Circular's new smart ring is getting blood pressure and blood glucose monitoring before the Apple Watch
Gemini on a mobile phone.
Worryingly, Google Gemini’s new AI image generation features can be used to remove watermarks from images and I'm concerned