Biz Builder Mike

You can't sail Today's boat on Yesterdays wind - Michael Noel

blog

Zimperium and Ping Identity Extend Zero Trust Controls to the Most Vulnerable Endpoint: Mobile


Integration of Zimperium’s mobile device risk attestation into the PingFederate platform enables real-time Zero Trust authorizations and access to corporate resources

Zimperium is excited to announce a partnership with Ping Identity, enhancing Zero Trust architectures by delivering comprehensive mobile risk posture data to enable joint customers to implement more robust controls and policies to provide end-users with clear, actionable alerts directing them to resolve security or compliance issues. With the real-time mobile threat detection, notification, and response from Zimperium and the PingFederate architecture and enterprise workflows, security teams can ensure mobile endpoint coverage is an integral part of their Zero Trust security posture.

The established perimeters around corporate devices have faded away, replaced by an ever-mobile distributed workforce with global access into enterprise assets. Increased connectivity and data availability enable organizations to grow and evolve beyond a physical location’s confines while minimizing the friction an employee would typically experience in this new, spread-out workspace. For enterprises to securely enable employees to access the data they need on the devices they use the most, Zero Trust must be enabled with advanced mobile threat defense.

Ping Identity, the Intelligent Identity solution for the enterprise, believes zero trust technology is essential to securing business and consumers in an increasingly connected world. And Zimperium’s integration into the PingFederate platform provides joint customers with enhanced controls, addressing the mobile device’s security posture by providing the granular telemetry data back to the Ping Identity Zero Trust architecture.

Using Zimperium’s patented on-device, machine learning-based mobile security technology, the integration enhances Ping Identity’s existing mobile endpoint identity management and access controls. Joint customers will be protected against targeted mobile risks and attacks and will immediately experience the benefits of enhanced Zero Trust capabilities and workflows, such as:

  • Broadest range of mobile risk and threat-based detection in the industry;
  • Real-time conditional access across all mobile devices and accounts across a broad range of apps and services;
  • Direct user feedback on detected risks within the protected app (where applicable)
  • Defined access policies best suited for the environment; and
  • Reduced attack surface through mobile endpoint access and authorization controls.

“Due to the rise in distributed work and bring your own device policies, the average enterprise is not securing 60% of the connected devices in their network – mobile endpoints,’ said Jon Paterson, CTO of Zimperium. “The integration between Zimperium and Ping Identity not only brings those devices into the security fold, but it also enhances mobile Zero Trust controls, minimizing mobile risks and attack surfaces.”

This integration between Zimperium and Ping Identity enables enterprises to evolve and scale without sacrificing their security posture. By enhancing existing mobile endpoint identity management and access tools, security operations teams can understand their whole risk posture and raise their mobile security confidence on managed and unmanaged mobile devices.

“Identity is the new perimeter that enterprises need to secure, and the best way to effectively do that is to leverage a zero trust approach that unifies mobile threat defense with strong authentication,” said Loren Russon, vice president of product management at Ping Identity. “Our integration with Zimperium will make zero trust implementation easy for security teams to deliver a more seamless and secure user experience.”

For More Information

Attend our webinar on April 29th at 11am EDT to see a how Zimperium enhances Zero Trust architecture on mobile endpoints.

About Zimperium

Zimperium, the global leader in mobile security, offers the only real-time, on-device, machine learning-based protection against Android, iOS and Chromebooks threats. Powered by z9, Zimperium provides protection against device, network, phishing and malicious app attacks. For more information, visit www.zimperium.com.

Previous Zimperium Mobile Security Blog PostPrevious Zimperium Mobile Security Blog Post Android Trojans Infect APKPure and Huawei App Stores

Zimperium and Ping Identity Extend Zero Trust Controls to the Most Vulnerable Endpoint: Mobile

Source

Android Trojans Infect APKPure and Huawei App Stores

Android TrojanAndroid Trojan

Two new active and aggressive Android Trojan variants have been discovered in the wild, impacting users taking advantage of two alternatives, non-Google Play app stores (“third-party” app stores). The discoveries are examples of how malware can spread through other sources outside of Google Play, and highlight the importance of sideloading detection, on-device malware detection, and app risk analysis to secure Android endpoints. With over 300 known third-party app stores hosting millions of applications, these alternatives are increasing in popularity with mobile endpoint users looking to circumvent regional restrictions and paywalls, access older or removed apps, as well as use unverified apps on their devices. Taking advantage of the side-loading capabilities, or unverified installations, these third-party app stores can pose big risks to mobile endpoints and the data they store.

The first and most prominent is a new mobile variant of the Android Triada malware discovered infecting the popular alternative Android app store APKPure app (3.17.18APKPure). Discovered by Doctor Web, this aggressive Android Trojan is capable of acting as the user on the device, including adding or deleting applications or even modifying local data. In this case, the infected APKPure app store was installing malicious applications that display ads on both the lock screen and in new browser tabs as well as collecting device information and sending it back to an unknown source.

APKPure, established in 2014 as an alternative repository of Google Play apps including older versions and no-longer-available titles, is one of the more popular third-party Android app stores available to users. While APKPure has responded to the malware discovery with a new version of their alternative app store (3.17.19), this aggressive infection and attack on Android users is not uncommon for users of third-party app stores due to the lack of security controls, code verification, and trusted security partners. Unfortunately, this is not the only malware seen in APKPure or other third-party app store applications.

The second discovery, also by Doctor Web, is of 10 decoy Android applications available in the Huawei AppGallery infected with a new variant of the Joker/Bread Android Trojan. A decoy application is submitted to app stores with modified code, either to circumvent features or paywalls, but are often found to be ripe with vulnerabilities and mobile malware. In this case, 10 decoy applications from three different developers were loaded with code enabling the attackers to act as the end-user, signing them up for expensive premium mobile services without any real interaction. This form of command-and-control (C2) is a common attack vector on traditional endpoints, and with the rise of mobile endpoint usage, it is no surprise to see it in the wild here.

The Huawei AppGallery is the official app store for Huawei devices and boasts over 45,000 applications and over 390 million global users, but lacks the advanced security controls found in Google Play. While Huawei has taken steps to remove the infected decoy applications from its app store, any customer that has downloaded any of the infected applications will need to take manual steps to remove and secure their device. The infected applications will remain on the device despite Huawei’s actions.

Steps to Protection

Zimperium customers were already protected against both the Android Triada Trojan and Joker/Bread Trojan through the on-device z9 Mobile Threat Defense engine, which identifies if any app is malicious, including zero-day malware.

Zimperium is able to identify devices that have an increased level of risk to malware by identifying which devices allow for app installation from unofficial app stores and unknown sources, as well as any other side-loaded application. Regardless of how the malware was installed, Zimperium’s z9 mobile threat defense engine detects known and unknown malware, keeping mobile users and their data secure.

To ensure your environment is protected from these two variants and attack vectors, we recommend a quick risk assessment. Inside zConsole, admins can review which apps are side-loaded onto the device that could be increasing the attack surface and leaving data and users at risk. After this, admins can identify and address which devices allow for installation from “unknown sources” i.e. third-party app stores.

Not a Zimperium customer? Contact us today for a free mobile risk assessment.

Impacted Applications

APKPure App Store Version 3.17.18APKPure

Decoy applications from Huawei App Gallery

  • StoreSuper Keyboard
  • Happy Color
  • Fun Color
  • New 2021 Keyboard
  • Camera MX – Photo Video Camera
  • BeautyPlus Camera
  • Color Rolling Icon
  • Funny Meme Emoji
  • Happy Tapping
  • All-in-One Messenger

About Zimperium

Zimperium, the global leader in mobile security, offers the only real-time, on-device, machine learning-based protection against Android, iOS and Chromebooks threats. Powered by z9, Zimperium provides protection against device, network, phishing, and malicious app attacks. For more information or to schedule a demo, contact us today.

Previous Zimperium Mobile Security Blog PostPrevious Zimperium Mobile Security Blog Post Gartner 2021 Market Guide for Mobile Threat Defense

Android Trojans Infect APKPure and Huawei App Stores

Source

European B2B Wealthtech Allfunds Set to List on Euronext Amsterdam Stock Exchange

Madrid-based Allfunds, a B2B Wealthtech solution provider, will reportedy be listing on the Euronext Amsterdam stock exchange.

Allfunds has developed a comprehensive ecosystem that aims to cover the complete fund distribution value chain and related investment cycles, including through Allfunds Connect, which is a suite of software-as-a-service or SaaS-powered digital, data and analytics software tools.

Allfunds had more than €1.2 trillion of assets under administration, as of December 2020. The company reports around €370 million in turnover and about €263 million adjusted Ebitda. The group also reports a growth rate of 13% during the last 3 months.

Allfunds has hired BNP Paribas, Credit Suisse Securities, Citigroup Global Markets and Morgan Stanley Europe as its joint bookrunner, for this latest offering, which includes a private placement of 25% of the firm’s outstanding shares that are held by LHC3, BNP Paribas and Credit Suisse.

Although  AllFunds won’t be getting any proceeds from the sale, the firm thinks that the listing could potentially provide access to diversified sources of financing and enhance its profile and general brand awareness.

Juan Alcaraz, founder and CEO of Allfunds, stated:

“We have built an ecosystem that covers the entire fund distribution value chain and investment cycle, integrated into a simple one-stop-shop for our clients. This listing provides us with the flexibility to accelerate the digital transformation of the wealth management industry and the growth of our best-in-class global platform.”

Allfunds may expand it business operations into other regions where it maintains a relatively smaller market presence, including in Asian and North American markets.

Allfunds, which claims to be the largest fund platform and world leader in the wealthtech space, recently launched a new mobile app for its digital eco-system Connect.

As mentioned in a company blog post:

“With the Connect App users will be able to track funds, manage portfolios wherever they are and never miss a critical alert. Users will be able to access information on their funds or adjust their portfolios at any time.”

Some other notable functions include:

  • Search, analyze, compare and monitor, from more than 200,000 funds at ETFs
  • Set-up and “access multiple alerts”
  • Stay “on top of watchlists that track funds”
  • Manage and “maintain control of portfolios accessing performance, risk, asset allocation and transactions”
  • With the Connect mobile app, users “leverage the power of Allfunds to manage funds and portfolios anytime, anywhere.”

Source

Gartner 2021 Market Guide for Mobile Threat Defense

Gartner 2021 Market Guide for Mobile Threat DefenseGartner 2021 Market Guide for Mobile Threat Defense

“Security and risk management leaders who need to strengthen their mobile security posture should adopt MTD products to improve their overall security hygiene.” – Gartner

Gartner recently published the 2021 Market Guide for Mobile Threat Defense report, and the analyst firm continued to highlight the importance of enterprise adoption of Mobile Threat Defense (MTD) solutions for the evolving workforce. Zimperium is once again recognized by Gartner as a Representative Vendor, providing an advanced MTD solution to organizations of all sizes and bringing security confidence to mobile endpoints.

You can read Gartner’s 2021 Marketing Guide for Mobile Threat Defense here.

The past year has proven that as mobile endpoints continue to be part of the larger, evolving attack surface, the number of threats against them continues to rise as well. And as mobile continues to be adopted into everyday workflows, the avenues of attack will continue to be shown. The mobile endpoint’s security posture connected to corporate networks, both managed and unmanaged, needs to be addressed early on to avoid any of these devices becoming the starting point for a much larger security incident.

“MTD products not only prevent attacks but also detect and remediate them. MTD focuses on identifying and thwarting malicious threats, rather than relying on device management configuration to protect against simple user mistakes.” – Gartner

Mobile Devices Supporting Zero Trust

The last year also saw enterprises adopting more advanced security architectures, with many focusing on zero trust architectures. But as they address security gaps with various security technologies, they must also normalize mobile device security. Properly configured and integrated, advanced MTD solutions can enhance existing zero trust controls by providing mobile device risk attestation. 

“Emerging use cases envisage MTD as a component of zero-trust network access (ZTNA) architecture and of an extended detection and response (XDR) system for detection and response, which can serve as a pilot for unified endpoint security. This is in addition to the use of MTD for mobile phishing protection.” – Gartner

Mobile Forensics in XDR

According to the Market Guide for Mobile Threat Defense, enterprises need to adopt mobile defense solutions into their security stack supporting their zero trust architectures and extended detection and response (XDR) technologies. And as organizations continue to evolve with both remote and distributed workforce policies, so must their cyber hygiene and security mindset.

This integration and extended security capabilities are vital to shoring defenses for enterprises evolving from EPP to XDR security solutions. Advanced MTD solutions provide the features, workflow, and capability that complement XDR capabilities on mobile devices.

UEM & SIEM Integrations

Gartner also highlights the importance of UEM and SIEM integrations with the rise in MTD deployments, integrating as seamlessly as possible into existing security workflows. While EPP vendors are deploying lightweight mobile security applications, they often do not have the capabilities, strengths, and maturities to match existing MTD solutions’ effectiveness. Integration into existing systems, from UEM to EPP dashboards, is key to providing effective mobile security outcomes for security and IT teams. 

“[Enterprises should] integrate MTD with incumbent unified endpoint management (UEM) tools. They should favor the app-based option and leave proxy-based deployment for corporate-owned business-only (COBO) scenarios.” – Gartner

“Usage of an MTD solution on top should aim not only to address advanced malicious threats but also to improve enterprise security hygiene.” – Gartner

Case for Purpose-Built Applications

IT and security leaders responsible for their enterprise’s mobile endpoint security should be aware that purpose-built mobile security applications are designed to do more than prevent attacks and bring a whole host of other advanced security features to the mobile devices. Zimperium zIPS, for example, is a hybrid machine learning endpoint application, providing both online and offline protection against phishing attempts, misconfigurations, malicious applications, and more across iOS, Android, and Chromebook devices.

“At the device level, the ability to assess postures, such as OS version, security updates, system parameters, device configuration, firmware and system libraries, to identify security misconfigurations, device vulnerabilities, and suspicious or malicious activity. For example, MTD tools can check for modification of system libraries and configurations, as well as for privilege escalation, such as a jailbreak or rooting.” – Gartner

And while legacy mobile security tools do exist, they lack the advanced approach to mobile endpoint security necessary to keep up with modern-day threats.

“[W]e see no value in adopting antivirus solutions that do not provide behavioral anomaly prevention and detection, as the underlying mobile platforms already perform signature-based scans to look for malware.” – Gartner

As enterprises of all sizes evolve their security posture and workforce in unison, the priority to adopt advanced mobile threat defense toolsets like Zimperium continues to rise among security and IT leaders. The only way enterprises can shore up their zero trust to XDR architecture and gather the data they need to make informed decisions with their UEM and SIEM, is with advanced mobile endpoint device security.

What Now?

If you want to learn more about how Zimperium can help secure your devices and apps in all the frequent use cases and more, please contact us for a free mobile risk assessment and security consultation

1 Gartner, Market Guide for Mobile Threat Defense, 29 March 2021. Dionisio Zumerle, Rob Smith.
Document ID: G00736793
Gartner Disclaimer

This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from https://get.zimperium.com/gartner-market-guide-for-mtd-2021/

Previous Zimperium Mobile Security Blog PostPrevious Zimperium Mobile Security Blog Post Zimperium Collaborates with Oracle to Provide Mission Critical Mobile Security to Customers

Gartner 2021 Market Guide for Mobile Threat Defense

Source

Astorya, Search Engine for Insurance and Banking Tech, Reviews 10 Years of Insurtech in Europe

Astorya.io, which aims to serve as the search engine for Insurance and Banking technologies, has published a blog post, titled InsurTech Europe: 10 Years Of InsurTech In Europe Analyzed Through 800+ Startups (based on data from astorya.io).

While discussing how InsurTech startups are gaining considerable ground across Europe, the blog post notes that insurance tech firms are “moving the lines in the insurance world.” This, according to the study performed by astorya.io for L’Argus. These startups have played a key role in the transformation of the sector which is expected to expand further.

As noted in the blog post:

“Unrecognized five years ago, InsurTech startups seem to have found their place in the insurance industry, despite pockets of resistance. A recent study by research firm Juniper thus underlines that globally they already account for 5% of the turnover of the entire market, a rate that is set to double over the next four years. But this groundswell covers distinct trends.”

The blog adds that the US and China have witnessed the rise of a relatively large number of online or digital insurance providers “oriented B to C (business to consumer), the size and regulation of local markets allowing it.” The post further notes that this may be “an approach that is less suited to Europe, even if Alan or Luko are showing [solid] growth.”

For example, Maif announced last year that it had managed to acquire 66,000 new clients “across all of its products.” Meanwhile, Luko, on home insurance alone, “won nearly 100,000” customers — according to Florian Graillot, founder astorya.vc, an InsurTech fund.

The post further noted that “beyond these exceptions, the world of European InsurTech has experienced certain structural and historical trends, which astorya.io (database on InsurTech and FinTech, created by the founders of astorya.vc) analyzes in a study for L’Argus.”

The Astorya team added:

“First observation: the European InsurTech ecosystem has entered a phase of maturity for two years, as shown by the significant decrease in the number of newcomers. And for good reason: in France, Alan, Luko and Shift Technology have monopolized new financing, as has pet insurance specialist Bought by Many in the UK, or even, in Germany, players such as Coya and WeFox. For several years now, these three countries alone have grouped together three-quarters of the continent’s InsurTech startups.”

The report pointed out that another key highlight is “the positioning of these newcomers in the insurance value chain.” It also mentions that in this regard, the astorya.io study emphasizes one important point: “the preponderance of these InsurTech startups in the individual insurance segment, mainly car and home, to a lesser extent health.”

The blog post added that P&C insurance products are “simple, therefore standardized, and have low margins … For traditional insurers, they are primarily starter products. ” It also noted that to gain a foothold, InsurTech startups must “rethink its distribution” — according to Florian Graillot.

The  blog post continued:

“Although there have been a number of failures in this segment, the founder of astorya.vc believes the market is far from saturated and new start-ups may appear: E-commerce is estimated to account for 30% of total commerce, almost 50% if outside of the food market. Where are we in insurance? Comparators represent 10% of the market … In short, if insurance follows other sectors of the economy, there is still plenty of room for these new digital native players.”

Source