Education Sector a Top Target for Mobile Malware Attacks

Mobile and IoT/OT cyber threats continue to grow in number and complexity, becoming more targeted and sophisticated, according to a new report from Zscaler. Across sectors, the cybersecurity company's annual ThreatLabz report documented 29% and 111% growth in mobile backing malware and mobile spyware attacks, respectively, as well as 45% year-over-year growth in blocked IoT malware transactions. The report is based on data from the Zscaler Security Cloud between June 2023 and May 2024, comprising more than 20 billion threat-related mobile transactions and associated cyberthreats, the company said.

The most frequent targets of mobile malware, the report found, were the technology (18%), education (18%) and manufacturing (14%) sectors. In fact, education saw a 136% increase in blocked mobile malware transactions compared to the previous year, an area where most other sectors experienced a general decline.

As for attacks on IoT devices, routers were by far the most targeted device type, drawing 66% of attacks. Education organizations were the victims of just 2% of overall IoT malware attacks, compared to 37% in manufacturing and 14% in the transportation sector, according to the report.  

The report also offered a number of predictions for the coming year:

  • IoT and OT devices will remain primary threat vectors.
  • Manufacturing will remain a top target for IoT attacks, including ransomware.
  • AI will increasingly be used to create believable phishing campaigns targeting mobile users.
  • Zero trust device segmentation will become a top security priority for IoT and OT systems, starting with critical infrastructure.
  • AI will play a critical role for IoT and OT defenders.
  • Private 5G ecosystems with zero trust will become a key strategy for IoT and OT connectivity.
  • The trend of security platform consolidation will extend to IoT and OT environments.

The full report is available on the Zscaler site (registration required).

About the Author

Rhea Kelly is editor in chief for Campus Technology, THE Journal, and Spaces4Learning. She can be reached at [email protected].

Featured

  • person signing a bill at a desk with a faint glow around the document. A tablet and laptop are subtly visible in the background, with soft colors and minimal digital elements

    California Governor Signs AI Content Safeguards into Law

    California Governor Gavin Newsom has officially signed off on a series of landmark artificial intelligence bills, signaling the state’s latest efforts to regulate the burgeoning technology, particularly in response to the misuse of sexually explicit deepfakes. The legislation is aimed at mitigating the risks posed by AI-generated content, as concerns grow over the technology's potential to manipulate images, videos, and voices in ways that could cause significant harm.

  • close-up illustration of a hand signing a legislative document

    California Passes AI Safety Legislation, Awaits Governor's Signature

    California lawmakers have overwhelmingly approved a bill that would impose new restrictions on AI technologies, potentially setting a national precedent for regulating the rapidly evolving field. The legislation, known as S.B. 1047, now heads to Governor Gavin Newsom's desk. He has until the end of September to decide whether to sign it into law.

  • illustration of a VPN network with interconnected nodes and lines forming a minimalist network structure

    Report: Increasing Number of Vulnerabilities in OpenVPN

    OpenVPN, a popular open source virtual private network (VPN) system integrated into millions of routers, firmware, PCs, mobile devices and other smart devices, is leaving users open to a growing list of threats, according to a new report from Microsoft.

  • interconnected cubes and circles arranged in a grid-like structure

    Hugging Face Gradio 5 Offers AI-Powered App Creation and Enhanced Security

    Hugging Face has released version 5 of its Gradio open source platform for building machine learning (ML) applications. The update introduces a suite of features focused on expanding access to AI, including a novel AI-powered app creation tool, enhanced web development capabilities, and bolstered security measures.