161% surge in mobile phishing pushes energy industry to its limits

Following Colonial Pipeline, crooks get a taste for energy companies

Mobile phishing attacks on the energy industry have increased by a whopping 161% in the wake of the attack on the Colonial Pipeline company that caused a fuel shortage in parts of the US.

Mobile phishing is one of the easiest ways for an attacker to steal credentials and compromise an organization’s infrastructure, according to security researchers at Lookout. The researchers also found that the energy industry encounters mobile app threats at twice the rate of other industries at nearly 8%.

A report published alongside the blog post found 17.2% of all mobile cyber attacks globally target energy organizations, making the industry the biggest target of hacktivists, cyber criminals, and nation-state-sponsored attackers.

Phishing exposure rates in North America more than doubled over the past year, with a 134% increase. Organizations experienced an average of attack rate of 13.2% — or one of every nine employees — below the average of their regional peers. 

The data was based on telemetry from more than 200 million devices, 150 million apps, and Lookout Secure Web Gateway (SWG) detections.

The report found the attack surface of energy organizations is ever-increasing due to complex supply chain relationships and digital transformation initiatives, where organizations are shifting workloads to mobile devices and cloud applications. 

Related Resource

The secure cloud configuration imperative

The central role of cloud security posture management

The secure cloud configuration imperativeFree download

It added that such initiatives enable employees, partners, and third-party vendors to remain connected from anywhere. However, this ecosystem exposes energy organizations to significant cyber risks, where a single vulnerability could expose an entire supply chain, as seen with the SolarWinds and Microsoft Exchange attacks of 2020 and 2021.

Stephen Banda, senior manager of security solutions at Lookout and the report’s author, said 95% of threats come from risky apps and app vulnerabilities. Risky apps are those that ask for unnecessary permissions and have poor data handling practices. Vulnerabilities are flaws in apps attackers can exploit to compromise a device.

“Many security teams may glance over mobile apps as they believe the mobile ecosystem is secure. The reality is that any app in your mobile fleet can have significant security and compliance ramifications, whether it’s the permissions they request, the SDKs they use or the vulnerabilities they carry,” he said.

Featured Resources

2021 Thales cloud security study

The challenges of cloud data protection and access management in a hybrid and multi cloud world

Free download

IDC agility assessment

The competitive advantage in adaptability

Free Download

Digital transformation insights from CIOs for CIOs

Transformation pilotes, co-pilots, and engineers

Free download

What ITDMs did next - and what they should be doing now

Enable continued collaboration and communication for hybrid workers

Recommended

BitMart suspends withdrawals following hack
cryptocurrencies

BitMart suspends withdrawals following hack

6 Dec 2021
Bridging the DevSecOps divide: Spotlight on key relationships
Whitepaper

Bridging the DevSecOps divide: Spotlight on key relationships

3 Dec 2021
Planned Parenthood cyber attack exposes data of 400,000 patients
cyber attacks

Planned Parenthood cyber attack exposes data of 400,000 patients

3 Dec 2021
Bridging the DevSecOps divide: Spotlight on zero trust
Whitepaper

Bridging the DevSecOps divide: Spotlight on zero trust

3 Dec 2021

Most Popular

What should you really be asking about your remote access software?
Sponsored

What should you really be asking about your remote access software?

17 Nov 2021
What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

30 Nov 2021
What is single sign-on (SSO)?
single sign-on (SSO)

What is single sign-on (SSO)?

2 Dec 2021