Threat Description Phishing Websites

Phishing Websites

Threat Description and actions taken by Wandera

Threat Description

Wandera can detected a known phishing site that is designed to trick the user into submitting sensitive information about themselves or your organisation.

Phishing attacks are designed to attack the individual, their employer, or both:

The user may submit corporate credentials or information into a website that is specially crafted to look authentic. An attacker can then use these credentials to access sensitive corporate resources.
The user may be tricked into submitting personally identifying information, such as social security number, credit cards, phone numbers, addresses, and other information. These can be used by an attacker to compromise the individual’s identity, and possibly use such a position to attack your organization.

How to handle the threat

Wandera automatically blocks access to phishing sites, including the one detected.

You may want to:

Contact the user and ask about the incident and determine if sensitive information was submitted or even so much as typed into any forms.
If passwords were submitted or typed without submission, force the user to change all of their passwords on company systems immediately.
Remind the user about the dangers of submitting sensitive information on their phone, regardless of how convincing the site may appear to be.

Wandera keeps your devices secure from

Man in Middle Attacks

Ransomeware

BAD CERTIFICATES

MALICIOUS APPS

MALICIOUS WEB SITES

ABUSE OF CREDIT CARDS

POORLY IMPLEMENTED SECURITY

HOW IT WORKS

Wandera Secure was designed for mobile and works seamlessly on iPhone, Android and Windows phones.

After installing the solution the app will protect and inform you directly if there are severe threats on your mobile device.

Additionally, you will receive an e-mail at the end of each month, with an overview of detected and remediated security threats during the month.

Wandera Secure gives you peace of mind!

REAL-TIME MACHINE LEARNING ANALYSIS

Billions of daily mobile data inputs are collected through the multi-level architecture and analyzed in real time by a mobile intelligence engine powered by Wandera.

Beyond inspecting the content, it studies the apps making each request, and maintains a reputation for each app.

When you analyze more data, you intelligently prevent more threats.

21,687,777

Unique Domains Visited

481,386

Requests handled

1,175,105,406

High severity threats detected

58,226

Data seen (in GB)

201,023,768,321

Daily inputs from mobile devices

MANAGED FOR YOUR CONVENIENCE

It’s in your (colleague’s) best interest to be able to use the smartphone / tablet to do business without worrying about anything else.

Flexinets now offers an Enterprise Mobile security solution for small and medium businesses as a managed service to make sure that you at least don’t have to worry about the security of your mobile devices.

Wandera Secure handles a variety of mobile threats

DEVICE THREATS

Jailbreaks, Semi Jailbreaks, Outdated OS, Malicious Profiles, Vulnerabilities.

APP THREATS

Personally Identifiable Information (PII) leaks from approved apps, Ad servers & APIs, Sideloading, Permissions.

WEB THREATS

Malicious sites & apps, Browser exploits, Phishing & Spam.

INFRASTRUCTURE THREATS

Man in the Middle Attacks, Rogue hotspots, Certificate spoof, WiFi phishing, Public cloud apps.

TRUSTED BY OVER 750 GLOBAL ENTERPRISES

Managed for your convenience

RANSOMWARE

How some exploits/malicious apps can block your phone?

When e.g. an email is sent to your account with a link to an invoice. As soon as you open the link, you will be sent to a website that can infect your smartphone with software e.g. “ransomware”. This software will lock your screen from further usage. The only way to access your phone again is paying the requested ransom to obtain the necessary code to unlock it (or restore your latest phone backup).

How we protect you against exploits/malicious apps?

Our Mobile Security Solution protects you against exploits/malicious apps. As soon as you click the link, the access to this site is blocked so ransomware can not be downloaded on your phone. This happens because the link is analysed by our malware detector (which analyses 2 billion web request every day) which then defines the website behind the link as insecure and access is denied.

MAN IN THE MIDDLE ATTACK

How can encrypted email be hacked?

Even if your email is encrypted, hackers can still compromise your privacy if you connect to a rogue hotspot (a hotspot masked as a free wifi hotspot for example at your local coffee shop.) that a hacker has set up. You think you are securely connected to your local café. In reality, it can be a mobile hotspot set up by hackers to exploit weaknesses in apps and possibly gain access to secure communication to read all your unencrypted communications as soon as you’re logged in. The hacker can with this information pretend he is you. And for example send an email in your name to your colleague eg. with a message that you for example need to transfer money or have to pay an attached invoice. The more information a hacker gets about you, the easier they can impersonate you and take advantage of the situation.

How we protect you against this?

Our Mobile Security Solution can help identifying potentially malicious hotspots and protect you from situations like this. The service seamlessly scans and determine if a wifi hotspot is not secure and can block or warn about it to prevent your email from being misused.

UNSECURE APPS

How your credit card information can be used by hackers?

We are buying more and more products and services online via our smartphones / tablets. When you do this, your credit card information is sent over the internet and in some cases this is done unencrypted (last year, this happened when flights were booked through the Easyjet app and a number of other airline apps). If this happens, the credit card information can be read and can be misused by hackers.

How we protect you against unsafe apps?

Our Mobile Security Solution protects you against these insecure apps through a combination of app reputation and scanning for unencrypted personal data like credit card numbers, passwords etc. If personal data is sent unencrypted or there are other security issues, you will be notified immediately via an in-app notification. You can then delete the app to be sure that your personal data is not misused.

Phishing Websites