Following our exploration of phishing and VPN habits, let’s talk mobile malware, inbox hijacking and device defence.

Your Mobile Device Is a Security Risk (If You Don’t Treat It Like One) 

Our phones and tablets store a staggering amount of personal and company information—emails, apps, credentials, files—and often have weaker security than workstations. 

Here’s the problem: mobile devices are small, easily lost or stolen, and frequently targeted by malware disguised as everyday apps. 

Quick wins for better mobile device security: 

• Set a PIN or biometric lock—no excuses 

• Only download apps from Google Play or the App Store 

• Don’t ignore software updates—they patch known security holes 

• Use antivirus software (yes, even on phones) 

• Never leave devices unattended in public 

• Factory reset before recycling, reselling or handing down a device 

📣 And if your phone is lost or stolen? Report it to IT immediately—it might be connected to company accounts or synced to business emails. 

Email Thread Hijacking: The Scam That Looks Like a Real Conversation 

This one’s sneaky: cybercriminals gain access to a legitimate email account, then insert themselves into a real email thread to trick someone into clicking a link, transferring money, or sharing sensitive data. 

They might say: 

• “Hey, can you settle this invoice ASAP?” 

• “Can you share the client files again, I lost them.” 

• “Here’s the revised document—let me know what you think.” 

Except it’s not really your colleague anymore—it’s an attacker. 

How to Spot and Stop Thread Hijacking 

Even though the message might come from a familiar address, there are always clues: 

• Slight wording changes or unfamiliar tone 

• Unexpected urgency or strange file requests 

• A new contact CC’d that you don’t recognise 

• Requests for financial details or login credentials 

Stay protected with: 

• Strong, unique passwords 

• Multi-Factor Authentication (MFA) 

• Regularly checking your login activity 

• Keeping your antivirus and email apps up to date 

• Verifying odd requests via a separate method (phone call, Teams, etc.) 

Even if it looks like it’s from someone you trust—double-check. Better to be cautious than compromised. 

Want to stay ahead of evolving digital threats? Explore more in our Endpoint Security category. 

Final Thoughts: Keep Your Essentials Locked Down 

Your phone and inbox are two of your most-used tools—and two of the most common entry points for cybercriminals. Don’t let convenience turn into a security hole. 

🔐 Lock devices 
📲 Update software 
✉️ Question unusual emails 
📞 Verify before acting 

Want Help Protecting What Matters? 

From mobile security policies to email protection and staff training, Novo IT can help you build confidence in your everyday tools—without slowing your team down. 

👉 Explore our Cybersecurity Services 
📞 Or chat with us about mobile and messaging security. 

Up next, we dig into BYOD—because your team’s tech can’t be your weakest link.

Disclaimer: This article was created with the assistance of AI tools based on prompts and guidance provided by Novo IT Ltd. 

---