A recent Lookout report found that there were over 4 million mobile-focused social engineering attacks in 2024. The report also found that there were 100% more phishing interactions on iOS than Android.  

Mobile devices are vulnerable to attacks due to the web browsers they use. The browser engines and components often contain vulnerabilities that, if exploited, could allow an attacker to remotely execute code on the device. These attacks typically occur through malicious webpages, which can be delivered via messaging apps. The report found over one million enterprise devices were running vulnerable app versions in 2024. 

According to the report, there were over 400,000 malicious apps detected on enterprise devices in 2024. Some of the malware families included IdShark, Triada, MoneytiseSDK and EyeSea.  

Some of the device misconfigurations included:  

• Out of Date operating system versions (29.5%) 
• Out of date Android security patch levels (11.5%) 
• No device lock (12%) 
• Unencrypted (3.3%) 

Read the report