Mobile-first phishing attacks surge as specific capabilities are targeted

As organizations increasingly rely on mobile devices for business operations, including multi-factor authentication and mobile-first applications, mobile phishing poses a severe risk to enterprise security. New research from Zimperium's zLabs shows a surge in mobile-focused attacks, dubbed 'mishing', activity peaking in August 2024 with over 1,000 daily attack records. These attacks are specifically designed to evade desktop security measures, executing only on mobile devices. Three percent of phishing sites use device-specific redirection, showing benign content on desktops while targeting mobile devices with phishing payloads. This makes detection and analysis of the attacks more challenging. 'Mishing is not just an evolution… [Continue Reading]