The Evolution of Mobile Specific Phishing

Zimperium zLabs reports a growing trend of mobile-specific phishing where attackers use adaptive and responsive website techniques and malicious mobile apps to harvest credentials and session cookies; analysis of ~500K phishing sites found a sharp increase in sites able to render mobile-specific content (75% adapting to mobile and a >50% increase over the study period). The report highlights detection challenges on mobile (limited browser extensions, lightweight sandboxing, cloud lookup delays), describes the FlyTrap malicious app campaign as a concrete example, and advocates on-device machine-learning and multi-layered defenses to provide zero-day protection against these attacks.