Top Three Mobile Phishing Lures: #2) Malicious Apps

The report describes mobile app–based phishing threats, using examples like BankBot which employs fake overlay screens and deceptive two-factor prompts to steal credentials from Android users. It emphasizes that app-based phishing evades traditional enterprise anti-phishing solutions and that compromised devices can be used to pivot into corporate networks, deliver ransomware, and spear-phish other employees; a related webinar is available on-demand.