Attack Surface Is… MOBILE CHRIS BOYKIN CHIEF TECHNOLOGY OFFICER

Your Most Vulnerable Attack Surface Is… MOBILE CHRIS BOYKIN CHIEF TECHNOLOGY OFFICER

According to IDG,

36 percent of businesses fully support employee-owned mobile devices in the workplace

46 percent of workers use their personal mobile devices for work

Mobile Devices increase Security Risks

Man-in-the-Middle attacks affecting any mobile wireless devices, regardless of OS

EnPublic Apps on iOS pose a serious threat Malicious iOS Profiles

96% of mobile attacks target Androids 5.6% of 500 most downloaded apps leak data

Sophistication of mobile threats on the rise: Ransomware, Masque Attack, Wirelurker. Pangu, Heartbleed, xSSer mRAT, and more

Network Attacks Infected Apps OS Exploits

MAJOR Hummingbad Trident MOBILE ATTACKS (Pegasus) Infected Apps VikingHorde Turkish Clicker DressCode

2016

25PP.com vShare.com more than 40M users, 40M users, 25% iOS. 8M downloads a day 15,000 iOS apps ©2015 Check Point Software Technologies Ltd. 10 HUMMINGBAD: 10M INFECTED DEVICES Malaysia, 113096 Ukraine, 117287 Algeria, 130129 Colombia, 137131 Vietnam, 137328 Egypt, 140007 China, 1606384 Romania, 147632 Nepal, 172327 Pakistan, 188758

Russia, 207940

Bangladesh, 209706

Thailand, 260128

United States, 286800 India, 1352772

Mexico, 325208

Brazil, 366566

Turkey, 448285 Indonesia, 489336 Philippines, 520901

©2015 Check Point Software Technologies Ltd. Source: 2016 BYOD and Mobile Security Report, Crowd Research Partners malicious Wi-Fi 13 TRIDENT- THE NEXT LEVEL OF iOS THREATS • Researchers from Citizen Lab revealed an attack on a UAE human rights activist’s iPhone. • A spear phishing SMS leveraging three Zero-Day vulnerabilities. • When clicked, the device is automatically Jailbroken and installs Pegasus spyware. • Affects iOS 7.x – 9.3.4 OS Exploits

Extract emails, contacts, calendar

Turn on microphone during strategic partner meeting

Turn on the Camera

Steal username and password of VPN

Extract data typed in corporate applications

Capture corporate emails

Intercept VDI sessions

Extract Information Track Device Location (phone & text logs, contact lists, (follow comings and goings) browser history, etc.)

Turn on the Microphone Send Email and SMS Messages (eavesdrop into conversations) (impersonate the user)

Turn on the Camera Change PIN and Lock Device (look around, steal images) (hold device for ransom)

©2015 Check Point Software Technologies Ltd. 21 ©2015 Check Point Software Technologies Ltd. [Restricted] ONLY for designated groups and individuals 22 ©2015 Check Point Software Technologies Ltd. [Restricted] ONLY for designated groups and individuals 23 ©2015 Check Point Software Technologies Ltd. Hacker User (CEO) 24 [Restricted] ONLY for designated groups and Hacker User ©2015 Check Point Software Technologies Ltd. [Restricted] ONLY for designated groups and individuals 25 Hacker User ©2015 Check Point Software Technologies Ltd. [Restricted] ONLY for designated groups and individuals 26 Hacker User ©2015 Check Point Software Technologies Ltd. [Restricted] ONLY for designated groups and individuals 27 Protect Yourself… Don’t jailbreak or root your devices Use Apps from Official Stores Keep your OS Updated Avoid “free Wi-Fi”

CHRIS BOYKIN CHIEF TECHNOLOGY OFFICER