IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Mobile banking apps a risk for security

Alongside macro and fileless malware, mobile banking poses the biggest risk in 2016

Woman's hand on a smartphone showing a mobile banking app

McAfee Labs has revealed the biggest threats to security this year and into next, claiming mobile banking apps, macro and fileless malware are most prevalent.

The company released the information in its newly-released November 2015 Threats Report, which identified the biggest threats to security in the third quarter of 2015.

"The cyber threat landscape often combines something old, something new, something blundered, and something you'," Vincent Weafer, vice president of Intel Security's McAfee Labs, said in a blog post. "The third quarter provides examples of old threats repackaged with social engineering, new fileless malware replacing rootkits, mobile app coding blunders, and the exploit of the weakest link in any ecosystem: you the user."

Researchers at the lab explored mobile threats, saying poor mobile app practices, such as disregarding back-end service provider guidance, means user data is exposed to services in the cloud. Mobile banking apps are particularly targeted here, which is even more concerning considering the sensitivity of the data such apps generate.

"A two-month analysis of nearly 300,000 mobile apps led McAfee Labs to the discovery of two mobile banking Trojans responsible for taking advantage of thousands of mobile banking accounts across Eastern Europe," Weafer explained.

"Known to the industry as 'Android/OpFake' and 'Android/Marry', the two malware strains were designed to take advantage of poor mobile app coding connecting mobile apps to back-end service providers managing app data."

McAfee's report also revealed macro malware has reached a six-year high, with incidents increasing four-fold in comparison to last year. The reason such threats have risen is because spearphishing campaigns are becoming more sophisticated, targeting enterprise users and encouraging them to download attachments containing such vulnerabilities.

Fileless malware should be a priority for IT managers to tackle. McAfee Labs said it captured 74,471 samples of fileless attacks in the first three quarters of 2015

Additional threats exposed in McAfee's report relate to mobile malware, which increase by 16 per cent over the last quarter, Mac OS malware, which quadrupled over the period and ransomware, which grew 18 per cent.

The good news is that rootkit-related attacks waned in popularity, dropping 65 per cent, while malicious signed binaries also declined.

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Recommended

Ransomware now strikes one in 40 organisations per week, Check Point finds
ransomware

Ransomware now strikes one in 40 organisations per week, Check Point finds

27 Jul 2022
McAfee and Visa offer 50% off antivirus subscriptions for small businesses
cyber security

McAfee and Visa offer 50% off antivirus subscriptions for small businesses

25 Jul 2022
Darktrace AI’s Antigena helps stop ransomware attack at Dordogne GHT
ransomware

Darktrace AI’s Antigena helps stop ransomware attack at Dordogne GHT

13 Apr 2022
Sabbath hackers are targeting US schools and hospitals
ransomware

Sabbath hackers are targeting US schools and hospitals

29 Nov 2021

Most Popular

Why convenience is the biggest threat to your security
Sponsored

Why convenience is the biggest threat to your security

8 Aug 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
Microsoft successfully tests emission-free hydrogen fuel cell system for data centres
data centres

Microsoft successfully tests emission-free hydrogen fuel cell system for data centres

29 Jul 2022