Mobile Attack Chains: The Real World Risks to Enterprise Security

Zimperium describes real-world mobile threat chains observed via its telemetry, detailing phishing and network-based attacks that lead to malicious app installs, Android system tampering (including disabled SELinux), SSL‑strip/MITM sessions on insecure Wi‑Fi, and instances of Pegasus spyware exploiting a zero‑day to jailbreak iOS devices; the report stresses that these attacks can succeed even on current OS releases and that detections existed but were ignored by users.