5 Mobile Attacks That Made Headlines in 2022

With our increasing reliance on smartphones for communication, work, and entertainment, mobile devices have become lucrative targets for cybercriminals. In 2022, mobile threats have continued to multiply, illustrating not only the dangers and impact of mobile threats but also the vulnerabilities of mobile device and app safeguards.

Here are 5 mobile threats that made headlines in 2022.

Pegasus Spyware

No stranger to the news in recent years, Pegasus spyware continued to make waves in 2022. Designed to collect sensitive data from cell phones and other devices, what makes Pegasus particularly dangerous is its ability to be installed remotely without any accidental installation or activation by the victim. For example, simply opening an iMessage for iPhone users can trigger the spyware.

Once a phone is infected with Pegasus, it gains access to messages, emails, calls, passwords, and location information. It can also secretly turn on a phone's microphone and cameras to create new recordings.

Notable Headlines:

• The Straits Times: Activists to sue Thai government over Pegasus spyware use.
• Channel News Asia: What is the Pegasus spyware scandal and how is Singapore affected?.
• CNET: Pegasus Spyware and Citizen Surveillance: Here's What You Should Know.
• Asia News Networks: A Israeli-made spyware Pegasus used in Indonesia since 2018, says IndonesiaLeaks.

QBot

QBot is an information stealer with backdoor and self-spreading capabilities that was first discovered in 2006. It is often used as the initial infection vector in malicious attacks and to this day, is one of the leading Banking Trojans globally. In the fall of 2022, cybercriminals utilized the malware to exploit a zero-day vulnerability infecting more than 1,800 users in just over a week, with corporate users accounting for almost half of the victims.

Notable Headlines:

• Techwire Asia: The latest malware threats: Glupteba and Qbot take center stage in December 2022.
• Securelist: QBot banker delivered through business correspondence.
• Security Week: QBot Malware Infects Over 800 Corporate Users in New, Ongoing Campaign.
• The Record: Hackers using Follina Windows zero-day to spread Qbot malware.

Hydra

Hydra is a banking trojan that targets Android devices. First discovered in 2019, Hydra is distributed via phishing messages, websites, and malicious applications in the Google store. It tricks users into enabling dangerous permissions on their mobile devices in order to steal financial credentials.

In October 2022, Hydra was the second most common mobile malware.

Notable Headlines:

• Bleeping Computer: Android malware on the Google Play Store gets 2 million downloads.
• CISO Mag: Over 300,000 Users Affected by 4 Android Banking Trojans.
• Outseer: The Growing Threat of Android Banking Trojans: Protecting Users and Organizations.

Godfather

The Godfather is a banking trojan that spreads through phishing emails or is downloaded in conjunction with other programs. Once installed, the malware generates fake login screens overlaid on top of banking and crypto exchange apps, recording login credentials, credit card numbers, and other private information. First detected in 2021, the Godfather had targeted more than 400 financial applications by October 2022.

Notable Headlines:

• Tech Wire Asia: Whether you use Android or iOS, no one is 100% secured.
• Reuters: German finance regulator warns of 'Godfather' malware attacks.
• Bleeping Computer: GodFather Android malware targets 400 banks, crypto exchanges.
• Toms Guide: Godfather malware is draining banking and crypto accounts — what you need to know.

Joker

Joker is spyware that is hidden in apps on the Google Play store. Once installed, the Joker collects SMS messages, contact lists, and information from the infected device. This allows it to subscribe unsuspecting users to premium services without their approval.

By June 2022, Joker was found in over 50 Android applications which had received more than 300,000 downloads.

Notable Headlines:

• Laptop Mag: 'Joker' malware snuck into 50 Android apps — delete them before hackers cackle away with your data.
• Security Brief Asia: Decline in mobile malware but hackers show growing sophistication.
• Fast Company: These malware-infected apps for Android could secretly run up your phone bill.
• ZDNet: Joker billing fraud malware found in Google Play Store.

For more mobile attacks that made the headlines in 2022, check out our partner Zimperium’s 2023 Global Mobile Threat Report.