E-Business
The Mobile Malware Landscape in 2022, of Spyware, Zero-Click Attacks, Smishing and Store Security
By Pankaj Bhula
Cyberattacks are increasing in number all the time. Indeed, our 2022 Mid-Year Report revealed a 42% global year-on-year increase in attacks and according to the World Economic Forum’s 2022 Global Risk Report, 95% of cybersecurity issues are traced back to human error.
This should be a red flag for all organizations, especially with the transition to remote and hybrid working, where employees are using mobile devices more often. These devices now have access to sensitive company data and direct connectivity to the enterprise network.
Combine that with the key ‘human error’ ingredient and you’ll see why mobile devices are such a prime target for cybercriminals.
Despite this, many corporate cybersecurity strategies tend to focus only on traditional endpoints, such as laptops. Do you know if all the mobile devices in your organization are safe from malware? Perhaps you have Mobile Device Management (MDM) and think that’s enough?
Unfortunately, MDM does not provide intrusion detection or scan for malware. And with the mobile threat landscape constantly evolving, it’s never been more important to have a robust solution in place. Let’s take a look at the current landscape and what you need to know to stay protected in 2022.
Thriving spyware marketplace
The current mobile malware landscape is a minefield with more and more vulnerabilities being exploited and spyware software being deployed.
In our last security report, we noted that NSO Group’s notorious spyware, Pegasus, was wreaking havoc after it was discovered gaining access to the mobile devices of government officials and human rights activists.
Unfortunately, 2022 was no different, with Pegasus found to have compromised the devices of Finland’s Ministry of Foreign Affairs, Spain’s Prime Minister as well as multiple devices of UK officials.
In July, Apple introduced a ‘lockdown mode’ for its devices to protect against Pegasus hacks. Even though this mode will increase the security of the users who will use it, but it will also significantly reduce the user experience and limit the functionality of iPhones.
However, while Pegasus is one of the most powerful tools currently on the market, the surveillance vendor ecosystem has also become more competitive.
For example, Predator, a spyware produced by commercial surveillance company Cytrox, infected iPhones towards the end of 2021 via single click links sent over WhatsApp.
As of today, the reach of these tools, let alone their mechanisms, is not yet fully understood by the cyber community despite extensive research efforts.
Zero Click Attacks
In terms of techniques, this year we have seen a surge in discovered zero-click attacks. As the name suggests these attacks require no input from the victim before deploying malware.
This is because they exploit existing vulnerabilities in already installed apps, allowing threat actors to sneak past verification systems and begin their attack unnoticed.
This technique is particularly focused on applications that accept and process data, for example, instant messaging and email platforms.
We saw this in action in April when a new zero-click iMessage exploit leveraged to install Pegasus on iPhones was discovered, running on some early iOS versions.
The exploit named HOMAGE was used in a campaign against Catalan officials, journalists and activists.
It’s important to emphasize however, that this technique isn’t just a threat to world leaders but to the everyday person and organizations.
Our phones are hubs of confidential data, both personal data such as banking information as well as business data, with many employees now connected to their company’s networks and data via their mobiles, which multiplied over the pandemic with thousands working from home. Cybercriminals are utilizing this silent and persistent practice to gain as much access as possible.
Smishing attacks on the rise
In addition to Zero Click attacks, we have also observed a continuous uplift in the spreading technique known as “Smishing” (SMS Phishing), which uses SMS messages as the attack vector for malware distribution.
These attempts often imitate trusted brands or personal contacts to entice the victim to click on a link or share personal details in confidence.
This method has proven particularly successful as after one device has been compromised, its entire contact list is up for grabs, creating an endless cycle of possible victims.
This is how the infamous Flubot was commonly deployed. Since its emergence in December 2020, it has been considered the fastest growing Android botnet ever seen.
The group is known to be particularly innovative and continuously seeking to improve its variants, having claimed tens of thousands of victims.
As such, in June, an international law enforcement operation involving 11 countries led to its infrastructure being taken down and rendering the malware inactive.
Evidently, Flubot’s position could not remain vacant for too long, as a new Android malware operation called MaliBot emerged in the wild soon after. MaliBot is targeting online banking and cryptocurrency wallets in Spain and Italy, looking to replicate the success of its predecessor.
At the time of writing, MaliBot is already the third most prevalent mobile malware worldwide, despite being so new, with AlienBot taking the top spot.
Safety on the App Store?
Many users turn to application stores to help keep their devices secure, however, unfortunately there are apps that claim to help manage security risks but which often contain malware themselves.
The most secured stores like Google Play Store and Apple App Store have thorough review processes to investigate candidate applications before they are uploaded and are held to high security standards once they are admitted onto the platforms.
A recent report stated that throughout 2021, Google blocked 1.2 million suspicious applications and Apple blocked 1.6 million.
Resourceful cybercriminals continually try to bypass these security measures, though, with different tactics such as manipulating their code to pass through the filters or introduce initially benign applications and add the malicious elements at a later stage.
So, it’s not surprising to still find malicious applications hiding in these stores. In fact, these platforms remain the main infection vectors in mobile threats.
For example, Check Point researchers recently analyzed suspicious applications on the Google Play Store and found a few of them masquerading as genuine Anti-Virus solutions, while in reality, once downloaded the apps installed an Android Stealer called SharkBot which steals credentials and banking information.
And in February, an Android banking Trojan called Xenomorph was spotted lurking behind a fake productivity application on the Google Play Store. There were over 50,000 downloads.
It must also be noted that due to the pandemic fueling increased use of mobiles for work purposes over the last two years, leveraging mobile phones for work purposes suddenly became the new normal for many users and enterprises, which meant targeting the mobile devices became also the new normal for cybercriminals.
Unfortunately, the general awareness of the users of mobile phones with regards to cybersecurity attacks is much lower, and even though, many of them have started leveraging their personal or work-provided mobiles for work purposes, many still do not view it as a sensitive corporate environment, being less careful of malicious emails or links they receive.
Unfortunately, the threat landscape is evolving rapidly, and mobile malware is a significant danger to both personal and enterprise security, especially as mobile devices are vulnerable to several attack vectors, from the application to the network and OS layers.
To combat this risk, organizations should also be looking to instill proactive strategies that can keep staff and corporate data safe from a potential attack. This must be a continuous journey as cybercriminals are relentless, always adapting and improving on their tactics.
For mobile users themselves, we recommend additional safety measures such as downloading applications only from certified Google and Apple stores, and even while downloading them there – review the recommendations, and number of downloads of a certain application, to verify that the applications is legitimate.
Mobile users should adopt on their mobile phones, the same rules they have as on their desktop devices such as not clicking on links from unknown senders, whether it comes via email, SMS message or messaging applications, and not to download files from untrusted sources.
For some businesses it may be beneficial to employ the help of tools that fortify endpoint resilience and secure remote users. Check Point Harmony for instance, uses real-time threat intelligence to actively guard against zero-day phishing campaigns, and URL filtering to block access to known malicious websites from any browser.
It also enforces conditional access, ensuring that if any device does become infected it will be unable to access corporate applications and data.
Harmony Mobile achieves all of this – and more – without disrupting employees or hampering their productivity.
Pankaj Bhula is Check Point’s EMEA Regional Director for Africa
Kashifu Inuwa, CCIE, the Director General of the National Information Technology Development Agency (NITDA), has emphasised that integrating intelligence, security, and sustainability is critical to driving Nigeria’s digital transformation and global competitiveness.
Inuwa made the remarks on Tuesday in Kano while delivering a goodwill message at the opening of the 19th International Conference (CONNOVATE 2025) of the Nigerian Computer Society (NCS), themed “Intelligent, Secure, and Sustainable Innovations for a Connected World.”
Represented by Engr. Salisu Kaka, Director of E-Government and Digital Economy Development, Inuwa said the three elements were now indispensable drivers of national progress. He highlighted the need for their convergence to unlock new opportunities in Nigeria’s technology sector, citing Estonia’s X-Road platform — which enables 99% of government services online — as a global model.
“In Nigeria, trust is the ultimate currency in our high-stakes digital environment, where scams and cybercrime are prevalent. Security builds and protects this trust,” Abdullahi said.
He stressed that while security provides the foundation, intelligence builds the structure, pointing to Artificial Intelligence (AI), Machine Learning (ML), and data analytics as tools for addressing Nigeria’s complex challenges. Warning that “innovation without security is unsustainable,” he likened it to “a high-performance race car without brakes.”
The DG urged the next wave of Nigerian startups to go beyond digitising existing processes to creating new value, citing AI-powered wealth management and ML-driven remote diagnostics as examples.
He further highlighted the various Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) initiatives supporting this vision, including the National Centre for Artificial Intelligence and Robotics (NCAIR), the Computer Emergency Readiness and Response Team (CERRT), the Nigeria Data Protection Act (NDPA) 2023, the national digital identity programme, interoperable payments, and human capital initiatives such as the 3 Million Technical Talent (3MTT) and Digital Literacy for All (DL4ALL) programmes.
Inuwa cited example with International Federation for Information Processing (IFIP) President, Antony Wong, that called for stronger protection and strategic use of data in the Global South to safeguard indigenous knowledge. He stressed the importance of legal clarity on data ownership as Nigeria’s cultural heritage in medicine, ecology, and art is digitised and incorporated into AI systems. Wong praised Nigeria’s role in the recent World Intellectual Property Organization (WIPO) treaty protecting genetic resources and traditional knowledge.
Delivering his welcome address, the NCS President, Dr. Muhammad Sirajo, said the conference would serve as a platform for IT professionals to address critical issues, including intelligent systems, fintech, sustainable energy, and innovations in agriculture, health, education, and national planning.
“This conference will provide an interdisciplinary platform for researchers, practitioners, and educators to present and discuss recent innovations, trends, and solutions for improving technological systems,” Sirajo said.
The week-long event includes plenary sessions, a doctoral consortium, a youth and entrepreneurship forum, the Fellows Forum, the Annual General Meeting, an IT quiz competition for students, and an induction ceremony for new members. It will conclude with the election of new national executives, a dinner, and an awards night honouring contributions to the ICT sector.
The African Development Bank (AfDB) is betting big on Artificial Intelligence (AI) as a catalyst for delivering Africa’s ambitious Agenda 2063.
With hands-on training in tools like ChatGPT and Google Gemini, the Bank believes the results could redefine how the continent plans, measures, and delivers its development goals.
Through its Joint Secretariat Support Office, the AfDB has provided technical and financial support to the 5th annual training workshop for African Union member states, focusing on the use of AI to track and implement the second ten-year plan (2024–2033) of Agenda 2063.
The five-day workshop, held in Lusaka, Zambia, was co-organised by the African Union Commission and the African Capacity Building Foundation.
Participants from across the continent rolled up their sleeves for hands-on training with emerging AI platforms like Ailyse, Google AI Studio, and Perplexity.
The goal of Africa’s multilateral development finance institution is to turn complex development data into actionable insights that can drive smarter decisions, faster interventions, and more accountable governance.
AbibuTamu, lead programme co-ordinator at the AfDB, said AI was now an indispensable tool for Africa’s future.
“These tools are not only revolutionizing how data is collected, analysed, and reported, they are also enabling more targeted policy interventions and efficient resource allocation,” Tamu told delegates.
Agenda 2063, dubbed “The Africa We Want,” is the African Union’s 50-year blueprint for inclusive growth and sustainable development. The second 10-year plan prioritises industrialisation, digital transformation, and sustainable livelihoods.
With AI now in the mix, African policymakers can track progress in real-time, spot bottlenecks before they choke projects, and reallocate resources where they are needed most.
The AfDB’s backing underscores a broader strategy of boosting both human and institutional capacity that propels African states to harness the digital revolution.
Beyond technical skills, the Lusaka workshop doubled as a peer-learning platform, with countries sharing real-world success stories on integrating AI into national planning and reporting.
“If Agenda 2063 is Africa’s long-term roadmap, this AI training is about upgrading the continent’s GPS that ensures leaders not only know the destination, but also have the intelligence to navigate every twist and turn on the way,” said Tamu.
It is holiday season in many parts of the world. These days though, going on holiday does not always mean turning your back on office life – hybrid work cuts both ways.
Today’s widespread connectivity—available at airports, train stations, restaurants, hotels, and most indoor public spaces—makes staying connected easier than ever, with free Wi-Fi in many locations and reliable 4G or 5G coverage elsewhere, helping to facilitate a seamless blend of work and leisure even while on holiday.
This increase in connectivity among travellers has not gone unnoticed by cyber criminals. Kaspersky experts analysed nearly 25,000 free Wi-Fi spots in Paris ahead of the Summer Olympic Games and Paralympic Games. The analysis revealed that almost 25% of these networks had weak or no encryption, making users vulnerable to personal and banking data theft.
Travellers often have their guard down. The unfamiliar surroundings of a new location or a different language can throw up a useful smokescreen for a cyberattack, meaning additional care needs to be taken when logging on. Fortunately, a few smart tools and habits can help you stay protected while enjoying the flexibility of remote work.
Use a VPN for secure connections
A VPN is one of the most effective ways to safeguard users’ online activity, especially when working from unfamiliar locations. By encrypting Internet traffic, a VPN ensures that hackers can’t intercept sensitive data like login credentials or financial details. This is particularly important when accessing work emails or company files on public Wi-Fi, where cybercriminals often lurk.
Switch to an eSIM for reliable, secure mobile data
Another useful digital tool that provides a seamless way to stay connected using local mobile networks with no physical SIM card required is the eSIM. This is a game-changer for international travellers who want to avoid sky-high roaming charges or the hassle of hunting down temporary SIM cards in foreign countries.
With an eSIM, a user can download a local data plan before you even arrive at your destination, ensuring instant connectivity the moment you land. This eliminates the need to rely on unsecured Wi-Fi hotspots, significantly reducing your exposure to cyber threats.
Plus, many eSIM providers allow you to manage multiple profiles on a single device, making it easy to switch between work and personal data plans without juggling multiple phones.
Services like Kaspersky eSIM Store enables users to purchase and activate data plans in advance, track usage and top up as needed, all from a single app.
Enable two-factor authentication (2FA)
When travelling, people often leave devices unattended. To protect against unwanted people logging in, travellers should ensure two-factor authentication (2FA) is enabled on all critical accounts and that passwords are used on all devices.
Final tips for a secure workation
Even with a VPN, eSIM and 2FA in place, your devices still need strong defenses against malware, phishing scams and ransomware. Cybercriminals often target remote workers who may let their guard down while travelling, making real-time protection essential.
Modern antivirus software does more than just scan for viruses, it actively blocks malicious downloads, warns you about phishing attempts and even secures your passwords and financial data.
For the most robust security, consider a solution like Kaspersky Premium, which combines antivirus protection, a VPN and password management into a single, easy-to-use package.
By combining a VPN, eSIM and strong antivirus, you can work from anywhere with confidence, whether you’re sending emails from a poolside or joining a video call from a festival tent.
NACCIMA, TETFund Forge Alliance to Boost Innovation, Skills, Economic Growth
IHS Nigeria, Osun State partner to transform technical education
Passengers Must Switch Off Phones during Flights — NCAA
FG Scraps 5 Percent Telecom Excise Duty Under New Tax Law
TETFUND Tasks Tertiary Institutions on Use of ICT for Teaching
Telecom3 days agoNCC Launches Nationwide Campaign to Defend Nigeria’s Digital Lifelines
News3 days agoCAC Delists 247 Firms Over Invalid Registration Claims
Telecom3 days agoGufwan Commends NCC for Sensitisation Workshop on Digital Citizenship for Persons with Disabilities
General News3 days agoNCC Moves to Protect Consumers, Enforce Accountability in Telecoms
General News3 days agoSamsung Launches the Sleek and Durable Galaxy A07 in Nigeria
Telecom2 days agoNCC Claims to Have Eliminated Unregistered SIMs from Telecoms Networks
General News3 days agoNGF Plans Investopedia to Showcase Investments in 36 States
Telecom2 days agoMTN Group Restructures Executive Team, Appoints Toriola VP for Francophone Africa