Mobile Device Hygiene

Manage App Permissions
Mobile applications need to be granted various permissions in order to function, but even legitimate apps sometimes request more permissions than necessary. For example, why would a music player app need to access your contacts or pictures? Always take note of those situations to prevent apps from accessing more data or personal information than needed.

Prioritize Physical Security
Not only should smartphones be protected with a unique PIN or code, it’s also a good idea to have the screen automatically lock after a few seconds. Even better, lock it immediately when you’re done with it or before putting it down. That way, if someone steals your phone, they won’t get access to any information stored on it without knowing the passcode.

Beware of Malicious Apps
Malicious applications steal data and spread malware. You can avoid them by only installing apps from legitimate app stores and developers. A way to tell if an app is trustworthy is by checking out its reviews and total downloads. One with millions of downloads and thousands of reviews is most likely legitimate.

Enable Find My Device Services
Most modern phones offer “find my device” services. If you lose your phone, use a second device to locate your phone via an online map or prompt it to ring. If you determine that the phone has been stolen or is not recoverable, you can use the erase function to completely remove all personal information and reset the device to factory settings.

Keep it Updated
Updates are often issued to address crucial security concerns. By keeping your phone and all apps on the latest versions, you avoid potential threats associated with outdated software. Ideally, enable automatic updates so you never miss an important fix. It’s also a good idea to occasionally review the apps you have installed and remove any you no longer need.

Voice Phishing
Voice phishing is a scam where the attacker contacts someone over the phone and tries to con them into surrendering confidential information. They often impersonate someone the target is familiar with. For example, they might pretend to be a bank representative who needs you to confirm your account information.
Avoid assuming someone is who they claim to be, regardless of how they contact you.

Messaging
It’s important to remember mobile devices are just as susceptible to malicious infections as desktop computers and laptops. That’s why attackers use various services and apps to send messages containing links. Opening the link on a phone could infect it with data-stealing malware.
Never open suspicious links or respond to random messages.

QR Codes
QR codes (quick-response codes) are a type of barcode that can be easily read by smartphones and tablets. They’re simple to create and distribute in both the physical and digital domains. Scanning a malicious QR code could yield similar results to opening a phishing link in an email or text message.
As a general rule, it’s best to avoid scanning QR codes when possible.

Applications
The most popular app stores implement robust security processes to prevent cybercriminals from uploading malicious apps. Unfortunately, thousands still get through and end up on mobile devices. Banking trojans represent a common example. They steal login credentials and can give the attacker access to financial information.
Remain cautious and selective regarding which apps you install.

Charging Cables
Cybercriminals have a history of leaving infected USB flash drives in public places, which provides a simple way to spread malicious software to computers. They can also use USB charging cables to remotely attack mobile devices, install malware, or steal confidential information.
Only use the USB cables you own; never plug in a random cable.