--- title: "Smartphones and tablets : An open door to ransomwares" description: The considerable increase in the number of ransomwares is a reminder of the importance of good IT security. image: https://blog.pradeo.com/hubfs/IMAGE-ARTICLE-1.jpg --- [![pradeo\_logo\_color](https://blog.pradeo.com/hs-fs/hubfs/pradeo_logo_color.png?width=220&height=33&name=pradeo_logo_color.png "pradeo_logo_color")](https://pradeo.com) - Solutions - [Mobile Threat Defense](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Secure Private Store](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/) - [Mobile Application Compliance Audit](https://pradeo.com/en/solutions/mobile-application-security/application-compliance-audit/) - [Runtime Application Self Protection](https://pradeo.com/en/solutions/mobile-application-security/rasp/) - [Shielding](https://pradeo.com/en/solutions/mobile-application-security/application-shielding/) - [Application Security Testing](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/) - Use cases - [Cybersecurity in MDM/ UEM](https://pradeo.com/en/use-cases/cybersecurity-in-mdm-uem/) - [Securing mobile devices](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Securing Mobile Applications](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/) - [Malware / leakware protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Phishing protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Ensuring compliance for applications](https://pradeo.com/en/compliance/) - [Ensuring compliance for mobile fleet](https://pradeo.com/en/compliance/) - [Securing BYOD](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/) - [Become partner](https://pradeo.com/become-partner/) - Resources - [Solution briefs](https://pradeo.com/en/resources/?solution-briefs) - [Customer Cases](https://pradeo.com/en/resources/?customer-cases) - [Integration briefs](https://pradeo.com/en/resources/?integration-briefs) - [White Papers](https://pradeo.com/en/resources/?white-papers) - [Analyst reports & guides](https://pradeo.com/en/resources/?analyst-reports-guides) - [On demand webcast](https://pradeo.com/en/resources/?webcasts-on-demand) - [About us](https://pradeo.com/en/about/) - [Blog](https://blog.pradeo.com/) - [Contact](https://pradeo.com/contact/) - en - [**FR**](https://blog.pradeo.com/fr) - [**DE**](https://blog.pradeo.com/de) ### Topics - Select a Topic ### Stay up to date SUBSCRIBE TO OUR BLOG ### Stay up to date [cyberattack](https://blog.pradeo.com/topic/cyberattack) # Smartphones and tablets : An open door to ransomwares ![Picture of Roxane Suau](https://blog.pradeo.com/hubfs/roxane-suau.jpg) By [Roxane Suau](https://blog.pradeo.com/author/roxane-suau) on August, 12 2024 [mailto:?subject=Take%20a%20look%20at%20this%20article](mailto:?subject=Take%20a%20look%20at%20this%20article) ![](https://blog.pradeo.com/hubfs/IMAGE-ARTICLE-1.jpg) In 2023, 63% of companies were victims of ransomware, according to Sophos.. At a time when we hear more often than ever about this threat in the global media, it should be noted that ransomwares are not new, but currently gaining a lot of popularity among cybercriminals. Today, a wide variety of public and private organizations are attacked. However, for cybercriminals the most suitable targets are those with poor IT hygiene, in fruitful sectors or whose activity continuance is critical. Quite often, public organizations' cyberdefense budgets are not adapted to the criticality of the information they handle. Thus, they are particularly affected by threats such as ransomwares. When the criticality of some devices is underestimated, as it is often the case with smartphones and tablets, hackers' access is facilitated.   ## Evolution of ransomwares Two new trends have emerged. On the one hand, it has been observed that ransomwares are often used as part of large-scale attacks, sometimes prepared months in advance and targeting carefully selected companies or public institutions (critical sector, high added value...). Qualified as *Big Game Hunting*, these onslaughts are often carried out by teams of hackers who have more financial and/or human resources than the average. The second trend is the opposite of the first. It is the widespread of Ransomware-as-a-Service offers on the dark web, aimed at people with little IT knowledge and looking for a simple and fast way to launch attacks. The Jigsaw ransomware, for example, is sold for about 3,000 dollars on cybercriminal forums. RaaS is available on a subscription basis and sometimes offers a management platform like any SaaS solution to monitor attacks. Much less powerful than Big Game Hunting, RaaS usually targets individuals or small businesses, randomly.   ## How can a ransomware infiltrate your system? ### Infection methodology To deploy a ransomware on an organization's information system, cybercriminals use fleets of computers, smartphones or tablets. Often, they use phishing and software vulnerabilities.   Phishing email Operable on a large scale for free, email is a favoured way to spread ransomwares. A study conducted by Pradeo shows that 34% of employees click on the link presented in phishing attempts sent by text message (email, SMS or via messaging applications).   ![ransomware\_shema2](https://blog.pradeo.com/hs-fs/hubfs/ransomware_shema2.jpg?width=773&name=ransomware_shema2.jpg) Source : [ANSSI - State of ransomware](https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-001.pdf)   Malicious or hijacked web page Some websites mimic known company pages or display a false window to entice Internet users to download a program, for example, claiming a security flaw in the OS or a required update. The program is actually a malware.   ![ransomware\_shema1](https://blog.pradeo.com/hs-fs/hubfs/ransomware_shema1.png?width=773&name=ransomware_shema1.png) Source : [ANSSI - State of ransomware threat](https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-001.pdf)   Vulnerabilities exploitation - Server: Some network vulnerabilities can be exploited to spread malware. A week ago, the banking system in India fell victim to it. - Software: Security holes in softwares can facilitate access to corporate data. For example, the democratization of VPN services makes them a target of choice and some are victims of brute force attacks to obtain administrators' credentials. ### Encryption and ransom demand When installed on a device connected to an information system, ransomwares quarantine security and remote management programs, and then encrypt local and remote files, connected disks, etc. Once this step is completed, a ransom is asked. In most cases, hackers demand to be contacted within a given time frame. Beyond that deadline, the encrypted information is erased, sold or published online. However, even if the payment is made (often in cryptocurrency, therefore untraceable), the organization is not sure to recover all of its data. To have an order of magnitude, the amount of a ransom ranges from a few thousand euros for an individual, and varies between 200,000 and 10 million dollars for the DarkSide and WastedLocker ransomwares.   ## Heavy consequences ### Financial losses Ransomwares are intended to extort money. When they are trapped, organizations face a dilemma: should we pay the ransom? Whatever their answer is, they will have to face financial losses related to an untimely shutdown of their activity, a complete clean-up of their information system, investigations to establish the source of the attack, penalties from data protection authorities, etc... ### Data leaks During a ransomware attack and regardless of the reaction of the victim, data leakage is inevitable. Even when the ransom is paid and the data is restored, the stolen information usually ends up on the black market. ### Forced shutdown A cyberattack often renders the computer system inoperable. It can slow down or even paralyze the activity of the affected organization. In some sectors, this leads to considerable financial losses, in others, such as in the healthcare sector and particularly in hospitals, it directly jeopardizes patients' safety. ### Image damages When an organization falls victim to ransomware, or any other attack leading to data leakage, it is difficult to keep it quiet. Sometimes, the legislation requires (in most countries) to notify such incidents to the government agency in charge of data protection. The media coverage of a security breach has serious consequences on a brand image, which can cause a loss of confidence from stakeholders: customers, partners, investors, etc.   ---   Prevent ransomware from exploiting your mobile fleet to infect your information system, protect your mobile devices with [Pradeo Security](https://www.pradeo.com/en-US/pradeo-security). ###### About The Author [More from this author](https://blog.pradeo.com/author/roxane-suau) ![](https://blog.pradeo.com/hs-fs/hubfs/roxane-suau.jpg?height=100&name=roxane-suau.jpg) ###### Roxane Suau #### Recommended articles ### Popular articles ### Stay up to date ### Recent articles ### Articles récents [Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1) \- 12 August, 2024 [RedHook: the banking trojan that grants itself system-level access on Android](https://blog.pradeo.com/redhook-the-banking-trojan-that-grants-itself-system-level-access-on-android) \- 12 August, 2024 [What Google's latest report reveals about mobile threats](https://blog.pradeo.com/what-googles-latest-report-reveals-about-mobile-threats) \- 12 August, 2024 [Android: The 4th zero-day vulnerability patched in six months](https://blog.pradeo.com/android-the-4th-zero-day-vulnerability-patched-in-six-months-1) \- 12 August, 2024 [Vibe Coding: when AI-generated code multiplies vulnerabilities](https://blog.pradeo.com/vibe-coding-when-ai-generated-code-multiplies-vulnerabilities) \- 12 August, 2024 ### Topics - [Mobile Security (56)](https://blog.pradeo.com/topic/mobile-security) - [Mobile Application Security (46)](https://blog.pradeo.com/topic/mobile-application-security) - [Expertise (31)](https://blog.pradeo.com/topic/expertise) - [Security Alert (30)](https://blog.pradeo.com/topic/security-alert) - [Cybersecurity (29)](https://blog.pradeo.com/topic/cybersecurity) - [News (28)](https://blog.pradeo.com/topic/news) - [Partners (25)](https://blog.pradeo.com/topic/partners) - [Corporate (12)](https://blog.pradeo.com/topic/corporate) - [Events (4)](https://blog.pradeo.com/topic/events) - [Actualité (2)](https://blog.pradeo.com/topic/actualité) - [predictions (2)](https://blog.pradeo.com/topic/predictions) - [cyberattack (1)](https://blog.pradeo.com/topic/cyberattack) see all [![New Call-to-action](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f) ### Get in touch with mobile security experts [Contact us](https://www.pradeo.com/en-US/contact-us) [![](https://blog.pradeo.com/hs-fs/hubfs/pradeo_logo_white_square.png?width=90&height=74&name=pradeo_logo_white_square.png)](https://pradeo.com) European leader in mobile security, Pradeo protects business mobile devices and applications. [Read More](https://www.pradeo.com/en-US/) - [Resources](https://www.pradeo.com/en-US/pradeo-ressources#white_papers) - [UEM security](https://www.pradeo.com/en-US/uem-mdm-security) - [Use cases](https://www.pradeo.com/en-US/pradeo-ressources#use-case) - [Data protection](https://www.pradeo.com/en-US/mobile-data-privacy-regulation) - [Contact us](https://www.pradeo.com/en-US/contact-us) - [Mobile Threat Defense](https://www.pradeo.com/en-US/mobile-threat-defense) - [Mobile Application Security Testing](https://www.pradeo.com/en-US/application-security-testing) - [In-App Protection](https://www.pradeo.com/en-US/in-app-protection) - [Secure Private Store](https://www.pradeo.com/en-US/private-app-store) - [Mobile Threat Intelligence](https://www.pradeo.com/en-US/mobile-threat-intelligence#perso-threat-intelligence) ![email.svg](https://cdn2.hubspot.net/hubfs/3067823/awwal/email.svg "email.svg") [contact@pradeo.com](mailto:contact@pradeo.com) Copyright @ 2022. All Right Reserved. - - - ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Roxane Suau" }, "dateModified" : "August 13, 2024, 8:28:39 AM", "datePublished" : "2024-08-12 15:23:40", "description" : "The considerable increase in the number of ransomwares is a reminder of the importance of good IT security.", "headline" : "Smartphones and tablets : An open door to ransomwares", "image" : { "@type" : "ImageObject", "url" : "https://f.hubspotusercontent10.net/hubfs/2378615/IMAGE-ARTICLE-1.jpg" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://2378615.fs1.hubspotusercontent-eu1.net/hubfs/2378615/Logo%20Pradeo%20D%C3%A9grad%C3%A9%20Long%20Couleurs.svg" }, "name" : "Pradeo" } } ```