Your organization’s leadership is 12 times more likely to be the target of a security incident and nine times more likely to be the target of a data breach than they were last year. Find out how they can be protected.
Read the Datasheet
Gift Cardsharks: The Massive Threat Campaigns Circling Beneath the Surface
Learn about the attack group primarily targeting gift card retailers and the monetization techniques they use.
Get the Report
Threat Hunting Workshop Series
Join one of our security threat hunting workshops to get hands-on experience investigating and remediating threats.
Attend an Upcoming Workshop
Inside Magecart: New RiskIQ & Flashpoint Research Report
Learn about the groups and criminal underworld behind the front-page breaches.
Threat Hunting Guide: 3 Must-Haves for the Effective Modern Threat Hunter
The threat hunting landscape is constantly evolving. Learn the techniques, tactics, and tools needed to become a highly-effective threat hunter.
These days, mobile security is top of mind for consumers and businesses alike, and for good reason—the mobile channel is ubiquitous and provides cyber threat actors a vast attack surface to target.
At home, 82 percent of online users in the United States used a mobile device for online shopping, with 35 percent being mobile-only online shoppers. In 2020, U.S. mobile retail revenues are expected to amount to 339.03 billion U.S. dollars, up from 207.15 billion U.S. dollars in 2018.
At work, employees use their phones on the company network and access sensitive corporate data every day. Even the way users interact with mobile devices is risky, as the smaller screens and simpler UIs make it easier for users to make more impulsive, uninformed decisions which increase their susceptibility to social engineering and fraud.
To highlight the mobile cyber threat landscape in the first quarter of 2019, RiskIQ published our Mobile Threat Landscape Q1 2019 report, which highlights our coverage of over 120 mobile app stores around the world, and our scans of nearly two billion resources looking for mobile apps in the wild. For the second-straight quarter, RiskIQ added over two million new apps to our database, partially due to RiskIQ’s ever-expanding list of monitored mobile app stores, but also because of the continued explosive growth of the mobile app market.
Additionally, Q1’s report includes a review of 2018’s mobile landscape, which demonstrates that the past 18 months have proven that even the savviest of users must be discerning and skeptical when downloading anything. Findings highlight ways in which Magecart, the infamous syndicate of credit-card skimming groups, assaulted retailers via mobile, including British Airways, which involved the compromise of the company’s mobile app. It also highlights the trend of blacklisted apps masquerading as or associating themselves with Bitcoin exchanges, Bitcoin wallets, or just “cryptocurrency” in general.
Q1 2019 key findings include:
Security teams need a solution that helps them quickly find, analyze, and mitigate cyber threats to their official, unofficial, and rogue mobile apps, and take corrective action with app stores from inside the platform. By discovering apps across hundreds of mobile app stores and monitoring them for malware or compromise, security personnel can maintain a secure mobile presence as well as the trust of their customers and prospect.
RiskIQ continuously scans hundreds of mobile app stores and millions of apps to safeguard your brand reputation and customers by detecting malware, application tampering, and brand impersonation. For each customer, RiskIQ creates a complete inventory of mobile assets that are related to the bank, official and unknown, across the global mobile app ecosystem. This process includes monitoring for new apps, existing apps, app updates, and rogue or fraudulent apps.
For specific metrics or to learn more, download the RiskIQ Mobile Threat Landscape Q1 2018 Report here.
RiskIQ is the leader in attack surface management. We help organizations discover, understand, and mitigate exposures across all digital channels.
🛡️#CyberSecurityBrief #Alert: @FTC Refunds Victims Of @OfficeDepot Tech Support Scam via @BleepinComputer @AthertonLab #CyberSecurity #InfoSec #Malware #Ransomware #DDoS #DataBreach #ITsecurity #CyberThreats #CloudSecurity #CyberSecurityInsights https://cybersecurityinsights.substack.com/p/your-friday-morning-cybersecurity?r=63k3&utm_campaign=post&utm_medium=web&utm_source=twitter
At #RSAC2020, stop by the @CrowdStrike booth on Tuesday at 11:30 to see the RiskIQ Illuminate app in action! It analyzes CrowdStrike endpoint coverage and compares it to RiskIQ's unmatched external data to provide a 360-degree view of your attack surface: https://bit.ly/2ujagwt
Credit Card Skimmer Found on Nine Sites, Researchers Ignored - by @Ionut_Ilascu
Looking for plans in San Francisco Monday night during #RSAC 2020? You're invited to party with RiskIQ at IGNITE, hosted by @FlashpointIntel! RSVP today: https://bit.ly/2R1SPJe