Mobile Threat Intelligence: Rethinking What Your Traditional EDR is Missing

There have been several cyber attacks recently that were launched through users’ mobile devices, often targeting high-profile government officials. For instance, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint statement in November 2024 that their ongoing investigation into the People’s Republic of China (PRC) targeting of commercial telecommunications infrastructure revealed a broad and significant cyber espionage campaign.

These kinds of incursions by bad actors on the part of hostile nation-states led to CISA’s release of a Mobile Communications Best Practices Guide. But the attacks also highlight the need for agencies to treat mobile as a frontline asset in their threat intelligence operations.

Learning Objectives:

• Recognize mobile-specific threat signals: Understand the telemetry and behavioral indicators that distinguish mobile threats from traditional endpoints
• Analyze real-world adversary campaigns: Review documented attacks by nation-state actors leveraging mobile exploits to infiltrate sensitive environments
• Evolve your threat intelligence program: Explore strategies to continuously gather, enrich, and apply mobile threat intelligence in a Zero Trust world