{"id":4076,"date":"2025-03-21T14:09:45","date_gmt":"2025-03-21T13:09:45","guid":{"rendered":"https:\/\/cyberawareness.sk\/?page_id=4076"},"modified":"2025-12-17T10:23:36","modified_gmt":"2025-12-17T09:23:36","slug":"bezpecnost-mobilnych-zariadeni","status":"publish","type":"page","link":"https:\/\/cyberawareness.sk\/en\/bezpecnost-mobilnych-zariadeni\/","title":{"rendered":"Mobile Device Security"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Mobile Device Security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tBack<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tPrevious topic<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tNext topic<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Why do attackers constantly target smartphones?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Approximately 83.72% of the world's population owns a smartphone. Their popularity, as well as the amount of data people store on their smartphones, naturally attracts attackers. Smartphones are no longer just for making calls or sending messages. They contain a huge amount of sensitive data that is extremely valuable to attackers. What might interest an attacker<\/strong><\/span>, when gaining access to your device? Here are a few areas:\u00a0<\/p>

  • Communication<\/span><\/strong>: An attacker can monitor your SMS, emails, chat apps (e.g. WhatsApp, Messenger) or even eavesdrop on your calls. The obtained data can be used for blackmail or phishing attacks.\u00a0<\/li>
  • Photography and video<\/strong><\/span>: Personal or sensitive files can be stolen, misused for fraud, creating a false identity, or used for blackmail.\u00a0<\/li>
  • Financial data\u00a0<\/strong><\/span>: Access to banking apps, payment cards, and mobile wallets can lead to unauthorized transactions and theft of money.<\/li>
  • Location data\u00a0<\/strong><\/span>: GPS on your smartphone allows an attacker to track your movements in real time, which can lead to physical tracking or theft.\u00a0<\/li>
  • Digital keys and documents:\u00a0<\/strong><\/span>If your phone contains an electronic ID card, insurance card, or digital keys to a car or building, an attacker can gain access to your identity and assets.\u00a0<\/li>
  • Microphone and camera:\u00a0<\/strong><\/span>A compromised device can be used to secretly record audio or video without your knowledge.\u00a0<\/li>
  • Personal documents and access data\u00a0<\/strong><\/span>: Saved passwords, contacts, or important files can be misused for further attacks or sold on the dark web.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t
    Source: pch.vector \/ Freepik<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Isolated application environment<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    When talking about attacks on applications, it is important to know that most modern applications run by default in a so-called \"sandbox\"<\/strong><\/span>. This is an isolated environment<\/strong><\/span>, where applications operate with limited permissions<\/strong><\/span>. This means that applications do not have<\/span> access to all parts of the device<\/span><\/strong><\/b><\/span>\u00a0and its data. If they need to work with another part in order to function, the user must grant them permission.\u00a0
    A permission<\/strong><\/span> allows access to certain functions or data on the device. Most often, an application requests it when it first starts. It is important not to give unnecessary permissions <\/span><\/strong>to applications that do not need it (e.g., a calculator does not need access to our contacts). Some applications can abuse user permissions. The goal of attackers is to manipulate the user into granting the requested permissions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t
    Sources: https:\/\/www.apriorit.com\/dev-blog\/545-sandbox-evading-malware<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    How can an attacker abuse privileges?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t