Name: The Evolution of Mobile Threat Actors
Start: 2018-07-19T15:00:00Z
End: 2018-07-19T15:00:36.000Z
Location: BrightTALK
Rating: 4.8

Lookout is an integrated endpoint-to-cloud security company. Our mission is to secure and empower our digital future in a privacy-focused world where mobility and cloud are essential to all we do for work and play. We enable consumers and employees to protect their data, and to securely stay connected without violating their privacy and trust. Lookout is trusted by millions of consumers, the largest enterprises and government agencies, and partners such as AT&T, Verizon, Vodafone, Microsoft, Google, and Apple. Headquartered in San Francisco, Lookout has offices in Amsterdam, Boston, London, Sydney, Tokyo, Toronto and Washington, D.C. To learn more, visit www.lookout.com.

We’d like to invite you to an opportunity to learn from a longtime Lookout customer, Alan Zaccardelle, who recently discovered an Android vulnerability, which he reported to Google and they are going to patch in the coming weeks. Alan has been with Airbus for more than 14 years and is now the CISO at one of their subsidiary organizations. 

As you know, Android devices can run both work and personal profiles. This newly discovered vulnerability has existed in the Android Work profile since 2015 and allows any app (malicious, legitimate, or unauthorized) to be sideloaded when a new Work profile is being created on a BYOD device. 

A malicious user can use this vulnerability to install any app during the Work profile creation and then use the sideloaded apps in the Work Profile as long as the device is enrolled in MDM. 

In this exclusive session, you’ll learn: 
- How Alan’s research led to this discovery and an explanation of its technical aspects
- The impact that this type of vulnerability could have on enterprise devices and data
- What mobile risk can look like, even on devices managed by an MDM, and why mobile needs to be part of your broader EDR strategy.

Exclusive Briefing: Discovery, disclosure, and impact of an Android vulnerability

Mobile devices have evolved into the cornerstone of employee productivity, communication and identity. However, they remain a blind spot for security teams and are a natural target for any threat actor aiming to compromise an organization. 

Without visibility into your organization’s mobile ecosystem, it’s impossible to identify security trends, potential risk, and coordinated cross-platform attacks. By the end of the session, you’ll have a well-rounded understanding of:
- How the traditional cyber kill chain is modernizing as threat actors exploit mobile devices and users more aggressively. 
- Evolving trends in the mobile threat landscape including the severity of mobile vulnerabilities and efficacy of social engineering attacks such as executive impersonation. 
- How mobile device telemetry can evolve from being a peripheral data point to a critical piece of the enterprise security puzzle by integrating with your SIEM, SOAR, or XDR. 
- Actionable insights that will help your security team gain better visibility into mobile risk and stay a step ahead of threat actors leveraging modern tactics.

The SOC’s Biggest Blind Spot and the Risk it Poses

2024 saw a surge in cyberattacks alongside rapid tech advancements, making it clear that staying ahead in the digital world is more important than ever.

In this exclusive webinar, we’ll explore the top cybersecurity predictions for 2025 — highlighting emerging threats, key trends, and the latest strategies for fortifying your defenses.

Join our expert panel as they share valuable insights and predictions on:
- New ransomware tactics and data breach methods
- How AI is shaping both security solutions and cyberattacks
- Growing threats from nation-states
- The latest security regulations and compliance frameworks

Cybersecurity Predictions: A Look into 2025's Security Landscape

As cyber criminals increasingly exploit mobile devices to breach cloud environments, security strategies for 2025 must prioritize mobile threat intelligence. This webinar explores new findings on advanced threats from China and Russia, demonstrating how mobile endpoints are leveraged in the modern kill chain to compromise cloud data. Learn why Mobile Endpoint Detection and Response (EDR) is essential in 2025 and how to stay ahead of evolving threats. Get actionable insights and strengthen your defenses against the rising tide of mobile-enabled cyberattacks.

2025 Security Planning: How to Utilize Mobile Threat Intelligence to Protect Cloud Data

Why Does My CEO Want My Password? Cybercriminals are impersonating senior executives and IT teams to trick employees into sharing critical sensitive information and corporate credentials. With one usable set of credentials, attackers can quietly access your cloud infrastructure and compromise data undetected. What’s worse is that you often don’t know when your employees are being targeted - making it impossible to proactively defend against these threats. 

Join this 30-minute webinar to learn: 

- How cybercriminals are modernizing their tactics to compromise entire organizations through a simple text message. 
- Why visibility into the initial steps of a modern attack is crucial to protecting data.
- How Lookout protects against executive impersonation and smishing attacks.

Lookout & Verizon: Executive Impersonation and Smishing Attacks Explained

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorized access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Turning the Tables on Adversaries: Enhance Your SOC Playbooks With Mobile

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorised access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Modern breaches now happen in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure with legitimate credentials and swiftly compromise data. Recent high-profile attacks are evidence of this including MGM Resorts, Caesars Entertainment, Twilio, and many others.

Join us for this 30-minute presentation to learn:
- How the traditional cyber kill chain has evolved to exploit mobile users
- Key findings from Lookout's Q1 Mobile Threat Landscape Report
- What makes your organization vulnerable to a modern-day attack
- Why automated defenses are essential
- How Lookout protects its customers from these types of attacks

Information Week Hosts Tales of a Modern Data Breach: The Rise of Mobile Attacks

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your organization safe.

Interactive Workshop: Hunt for Threats with Lookout Researchers

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your data secure

Scattered Spider: The cybercrime group behind the MGM Resorts data breach costing an estimated $100 million. 
APT41: A notorious Chinese APT that recently developed two mobile surveillanceware tools, WyrmSpy and DragonEgg, to target over 100 public and private sector organizations.

These two groups represent a global shift among threat actors – focusing on mobile devices to quietly compromise credentials, apps, and data. Join Tyler Croak, Principal Strategist at Lookout, and Ken Saganowski, Director of Technical Advisory at MOXFIVE, in this 30-minute session, to learn: 
 
- How the traditional kill chain has evolved 
- What modern tactics are being used to trick your users
- What happens after an attacker gains access - A real-life Scattered Spider example
- How to detect an intruder in your system
- What immediate actions you can take today to protect data in 2024

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Cybercriminals continue to evolve their tactics to compromise your organization's security defenses. The modern approach is to start by targeting users on their mobile devices to steal their credentials. 

Learn how these cybercriminals have evolved their tactics, and how Lookout prevents and protects at each stage of the kill chain. 

For more information, visit: www.lookout.com

How Lookout Protects Against the Modern Day Kill Chain

Embark on a focused exploration of the critical areas in mobile security in our upcoming webinar. Let us equip you with the knowledge needed to safeguard your organization’s mobile devices from phishing and malicious content. We’ll share threat intelligence, demonstrate simulated incident response scenarios, and show you how to tighten security with Workspace ONE Mobile Threat Defense integrated phishing and content protection.

See Mobile Threat Defense in Action

Cloud breaches are now happening in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure and swiftly compromise data.

Join us for this 30-minute webinar with Lookout EVP of Product to learn: 
- How the traditional cyber kill chain has evolved to exploit mobile users
- Why attacks utilizing a mobile device are increasing
- What makes your organization vulnerable to a modern-day attack 
- Why stopping breaches requires the ability to identify anomalous data movements
- The three key capabilities you need to defend against modern breaches

The Modern Kill Chain: How Attacks Have Gone From Months to Minutes

As the digital age is constantly evolving, the cybersecurity landscape remains in a constant state of change. The year 2023 bore witness to a multitude of cyberattacks and technological advancements, emphasizing the pressing need to stay one step ahead of the ever-shifting digital frontier.

In this webinar, we'll discuss the top cybersecurity predictions for 2024, including emerging threats, trends, and best practices for defense.

Our experts will share their insights on:
- The most likely cybersecurity threats to face in 2024
- The latest cybersecurity trends and how they could impact your organization
- Best practices for defending against emerging threats
- How to build a resilient cybersecurity posture

Cybersecurity Predictions for 2024: Emerging Threats and Best Practices

Cybercriminals and nation states are consistently using mobile threat tooling as part of their espionage or financially motivated attacks and campaigns. The Lookout Threat Intelligence team has noticed this increase as we research and protect against these adversaries. These actors are increasingly seeing value from having an offensive mobile capability in their toolkit and we have even seen low sophistication groups break into this space and successfully steal gigabytes of data from compromised devices. As BYOD and the prevalence of mobile devices in corporate environments continue to blur the traditional enterprise perimeter, the ability to understand the risks to mobile endpoints is critical.

Join Michael Flossman, Head of Threat Intelligence at Lookout, for this informative webinar as he covers the evolution of threat actors on mobile, discusses several recent high-profile cases, and explains why gaining visibility into your mobile endpoints and proactively securing them is key for today’s organizations."

The Evolution of Mobile Threat Actors

Threat Intelligence

BYOD

Security as a Service

Security Breach

Mobile

Application Security

Cyber Attacks

Cyber Crime

Endpoint Security

Cyber Security

Get powerful HR legislation insights that will help you safeguard your business and workforce. Connect with thought leaders and colleagues to get the most up-to-date knowledge on legislations you need to be aware of.

Legislation

The legal community on BrightTALK combines the fields of employment law, e-discovery, intellectual property and environmental law to create a thriving ecosystem of legal resources. Attend live and on-demand webinars dealing with employment contract law, e-discovery solutions, intellectual property software and sustainable development from leading lawyers and legal professionals to gain knowledge in a wide range of fields. Join the community and be part of the conversation by attending live legal webinars and connecting with industry thought leaders.

Legal

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

The Evolution of Mobile Threat Actors

Presented by

About this talk

Lookout