Nokia malware report reveals new all-time high in mobile device infections and major IoT device security vulnerabilities

• Mobile device malware infection rates increased steadily in 2016, reaching an all-time high
• Smartphones hit hardest: infections rose nearly 400 percent in 2016, and accounted for 85 percent of all mobile device infections in the second half of 2016
• Massive Distributed Denial of Service (DDoS) attacks revealed urgent need for improved Internet of Things (IoT) device security

27 March 2017

Espoo, Finland - Nokia today issued its latest Threat Intelligence Report, revealing a new all-time high in mobile device malware infections, a sharp increase in compromised smartphones and major IoT device security vulnerabilities.

Issued twice per year, the Nokia Threat Intelligence Report examines general trends and statistics for infections in devices connected through mobile and fixed networks around the world.

The latest report revealed a steady increase in mobile device infections throughout 2016, with malware striking 1.35 percent of all mobile devices in October - the highest level seen since reporting started in 2012. The report also revealed a surge of nearly 400 percent in smartphone malware attacks in 2016. Smartphones were the most-targeted devices in the second half of the year, accounting for 85 percent of all mobile device infections.

While Android(TM)-based smartphones and tablets continued to be the primary targets, reflecting the prevalence of the operating system worldwide, iOS-based devices also suffered attacks in the second half of the year, primarily by Spyphone surveillance software that tracks users' calls, text messages, social media applications, web searches, GPS locations and other activities.

The Threat Intelligence Report also exposed major vulnerabilities in the rapidly expanding universe of IoT devices, underscoring the need for the industry to re-evaluate its IoT deployment strategies to ensure these devices are securely configured, managed and monitored.

Kevin McNamee, head of the Nokia Threat Intelligence Lab, said: "The security of IoT devices has become a major concern. The Mirai botnet attacks last year demonstrated how thousands of unsecured IoT devices could easily be hijacked to launch crippling DDoS attacks. As the number and types of IoT devices continue to proliferate, the risks will only increase. Nokia's network-based security can help address this growing threat by detecting activity before a DDoS attack occurs, enabling service providers to take corrective actions that mitigate the impact."