Mobile banking apps a risk for security

Alongside macro and fileless malware, mobile banking poses the biggest risk in 2016

mobile banking

McAfee Labs has revealed the biggest threats to security this year and into next, claiming mobile banking apps, macro and fileless malware are most prevalent.

The company released the information in its newly-released November 2015 Threats Report, which identified the biggest threats to security in the third quarter of 2015.

"The cyber threat landscape often combines something old, something new, something blundered, and something you'," Vincent Weafer, vice president of Intel Security's McAfee Labs, said in a blog post. "The third quarter provides examples of old threats repackaged with social engineering, new fileless malware replacing rootkits, mobile app coding blunders, and the exploit of the weakest link in any ecosystem: you the user."

Researchers at the lab explored mobile threats, saying poor mobile app practices, such as disregarding back-end service provider guidance, means user data is exposed to services in the cloud. Mobile banking apps are particularly targeted here, which is even more concerning considering the sensitivity of the data such apps generate.

"A two-month analysis of nearly 300,000 mobile apps led McAfee Labs to the discovery of two mobile banking Trojans responsible for taking advantage of thousands of mobile banking accounts across Eastern Europe," Weafer explained.

"Known to the industry as 'Android/OpFake' and 'Android/Marry', the two malware strains were designed to take advantage of poor mobile app coding connecting mobile apps to back-end service providers managing app data."

McAfee's report also revealed macro malware has reached a six-year high, with incidents increasing four-fold in comparison to last year. The reason such threats have risen is because spearphishing campaigns are becoming more sophisticated, targeting enterprise users and encouraging them to download attachments containing such vulnerabilities.

Fileless malware should be a priority for IT managers to tackle. McAfee Labs said it captured 74,471 samples of fileless attacks in the first three quarters of 2015

Additional threats exposed in McAfee's report relate to mobile malware, which increase by 16 per cent over the last quarter, Mac OS malware, which quadrupled over the period and ransomware, which grew 18 per cent.

The good news is that rootkit-related attacks waned in popularity, dropping 65 per cent, while malicious signed binaries also declined.

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

How can you protect your business from crypto-ransomware?
Security

How can you protect your business from crypto-ransomware?

4 Nov 2019
Microsoft spearheads industry-wide charter against AI cyber attacks
Security

Microsoft spearheads industry-wide charter against AI cyber attacks

23 Oct 2020
Weekly threat roundup: Chrome, Citrix and WordPress
Security

Weekly threat roundup: Chrome, Citrix and WordPress

23 Oct 2020
IT services giant Sopra Steria falls victim to Ryuk ransomware
Security

IT services giant Sopra Steria falls victim to Ryuk ransomware

23 Oct 2020

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
The enemy of security is complexity
Sponsored

The enemy of security is complexity

9 Oct 2020
IBM and SAP expand partnership to support software on hybrid cloud
Cloud

IBM and SAP expand partnership to support software on hybrid cloud

21 Oct 2020