{"id":94299,"date":"2019-02-26T00:00:23","date_gmt":"2019-02-26T08:00:23","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=94299"},"modified":"2025-05-22T21:22:03","modified_gmt":"2025-05-23T04:22:03","slug":"2019-mobile-threat-report","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/2019-mobile-threat-report\/","title":{"rendered":"Open Backdoors and Voice Assistant Attacks: Key Takeaways from 2019’s Mobile Threat Report"},"content":{"rendered":"

These days, we seem to have a newfound reliance on all things \u2018smart.\u2019 We give these devices the keys to our digital lives, entrusting them with tons of personal information. In fact, we are so eager to adopt this technology that we connect 4,800 devices per minute<\/a>\u00a0to the internet with no sign of slowing down. \u00a0This is largely because smart devices make our lives easier and enjoyable. But even though these devices are convenient, it\u2019s important to understand they\u2019re also convenient for cybercriminals, given they contain a treasure trove of personal data. To examine how exactly these hackers plan on capturing that data, we at McAfee have taken a deep dive into the mobile threat landscape in this year\u2019s Mobile Threat Report<\/a>. In this report, we examine some of the most significant threat trends, including new spyware, mobile malware, and IoT attack surfaces. Let\u2019s take a look at these trends and how you can keep all your devices protected.<\/p>\n

Operations RedDawn and FoulGoal<\/strong><\/h2>\n

In our 2018 report<\/a>, we predicted that attacks targeted toward mobile devices would increase, and everything from fake Fortnite apps to increased mobile malware has proven this to be true. However, two recent discoveries, Operation RedDawn and FoulGoal, prove just how targeted these attacks can really get. RedDawn, in particular, has set its sights on North Korean refugees, as the spyware attempts to copy photos, contacts, SMS messages, and other personal data belonging to the victim.<\/p>\n

The latter attack, FoulGoal, actually occurred during last year\u2019s World Cup, as the campaign used an app called Golden Cup to install spyware on victims\u2019 devices. This app promised users live streams of games from the Russian 2018 FIFA World Cup, as well as a searchable database of previous World Cup records. In addition to stealing the user\u2019s phone number, device details, and installed packages, FoulGoal also downloaded spyware to expand its infection into SMS messages, contacts, GPS details, and audio recordings.<\/p>\n

A Virtual Backdoor<\/strong><\/h3>\n

Our smartphones are now like remote controls for our smart homes, controlling everything from lights to locks to kitchen appliances. So, it was only a matter of time before cybercriminals looked for ways to trick users into leaving open a virtual backdoor. Enter TimpDoor<\/a>, an Android-based malware family that does just that. First appearing in March 2018, it quickly became the leading mobile backdoor family, as it runs a SMiShing campaign that tricks users into downloading fake voice-messaging apps.<\/p>\n

These virtual backdoors are now an ever-growing threat as hackers begin to take advantage of the always-connected nature of mobile phones and other connected devices. Once distributed as Trojanized apps through apps stores, like Google Play, these backdoors can come disguised as add-on games or customization tools. And while most are removed fairly quickly from app stores, hackers can still pivot their distribution efforts and leverage popular websites to conceive a socially engineered attack to trick users into enabling unknown sources.<\/p>\n

The Voice Heard Around the Home<\/strong><\/h2>\n

Around the world, there are already over 25 million voice assistants, or smart speakers, in use. From simple queries to controlling other IoT gadgets throughout the home, these devices play a big role in our living environments. But many of these IoT devices fail to pass even the most basic security practices, and have easily guessable passwords, notable buffer overflow issues, and unpatched vulnerabilities. This makes voice assistants an increasingly valuable and potentially profitable attack vector for cybercrime.<\/p>\n

For a typical voice assistant in the home, the attack surface is quite broad. Cybercriminals could gain access to the microphone or listening stream, and then monitor everything said. Additionally, they could command the speakers to perform actions via other speaker devices, such as embedding commands in a TV program or internet video. Crooks could even alter customized actions to somehow aid their malicious schemes. However, some of the most pressing vulnerabilities can come from associated IoT devices, such as smart plugs, door locks, cameras, or connected appliances, which can have their own flaws and could provide unrestrained access to the rest of the home network.<\/p>\n

The good news? We at McAfee are working tirelessly to evolve our home and mobile solutions to keep you protected from any current and future threats. Plus, there are quite a few steps you can personally take to secure your devices. Start by following these tips:<\/p>\n