Wireless and Mobile Device Security, 2nd Edition

Mitigating Mobile Browser Attacks

Website attacks on mobile browsers are commonplace, and many are rather sophisticated. As a result, you must make sure any browser on a smartphone is hardened to protect against client-side threats. Best practices include the following:

• Practicing due diligence—This is especially true when downloading Android apps because Android phones are susceptible to malware.
• Using HTTPS when entering credentials—If a site doesn’t offer HTTPS, users should think twice before keying in private or sensitive data. HTTPS is indicated by the site’s URL, which should begin with HTTPS:// or sometimes by a security lock icon.
• Maintaining robust antimalware software—Ensure it’s always up to date and scans often.
• Blocking pop-ups ...