Zimperium: “Mishing” Threats Are Increasing Significantly

Social engineering attacks are on the rise, mobile risks for companies from sideloading attacks are increasing, and there is a significant threat of a rise in ransomware attacks targeting mobile devices.

Social Engineering Attacks Are Becoming Increasingly Sophisticated

Cybercriminals are developing more advanced mobile phishing attacks. “Mishing” threats (mobile-targeted phishing) use various tactics to exploit user errors and vulnerabilities in mobile devices. These social engineering attacks are continuously evolving and becoming more sophisticated. Zimperium predicts a rapid increase in AI-driven malware programs that mimic user behavior, making it much harder for traditional security solutions to detect them.

Attackers are adopting a “mobile-first” strategy, employing diverse techniques to infiltrate malware into corporate environments. In particular, they exploit weakly secured and unmonitored mobile devices to gain access to company networks and sensitive data. According to The Global Mobile Threat Report 2024, 82% of phishing sites now target mobile devices.

New Points of Attack Increase Mobile Risks for Companies

Cybercriminals are diversifying their efforts to compromise corporate networks in 2025 by targeting new entry points. Threat actors are increasingly utilising iOS shortcuts, mobile configuration profiles, and sideloaded apps on iPhones and iPads to bypass security measures. Recent statistics highlight the growing risks for business users when installing apps that are not from official app stores.

Zimperium research reveals that 68% of mobile threats faced by financial service providers stem from sideloaded apps. Mobile users who sideload programs face a 200% higher risk of installing malware on their devices. While sideloading remains far more common on Android devices, security researchers anticipate an increase in malware on iOS platforms following the adoption of the EU’s Digital Markets Act.

Significant Increase in Ransomware on Mobile Devices

For instance, a Zimperium study on banking Trojans found that mobile banking and financial apps are increasingly targeted by malware, some of which already possess ransomware capabilities. These evolving attack techniques indicate a shift away from pure data theft. In the future, ransomware and blackmail attacks are expected to increase significantly, specifically targeting mobile users and platforms.