cyber.hendryadrian.com
Security Report · lookout.com

Lookout’s Q3 2025 Mobile Threat Report Highlights Persistent Phishing and Browser Vulnerability Risks

· Original article ↗

Summary

Lookout reports persistent mobile phishing exposure in Q3 2025, higher encounter rates on iOS than Android, and continued risk from unpatched browser vulnerabilities across mobile devices and apps.

Key points

  • The global mobile phishing click rate was 12.88%, close to the four-quarter average of 12.86%.
  • Phishing encounter rates were 16.07% on iOS and 7.78% on Android; iOS exposure rose quarter over quarter while Android exposure declined modestly.
  • MDM-managed devices had a 12.63% encounter rate, compared with 13.61% on unmanaged devices; the report says management controls reduce but do not eliminate exposure.
  • SMS, iMessage, WhatsApp, and Telegram remain channels for mobile phishing, including on managed devices.
  • The report lists commonly observed mobile browser vulnerabilities, including Chrome issues exploitable through crafted webpages; one cited vulnerability was actively exploited in the wild.
  • Delayed updates and limited visibility into mobile OS and app versions can leave browser components exposed after patches are available.

Article Details

Publisher
Lookout Intel
Report Period
2025 Q3
Scope
Global mobile phishing and malicious web encounters, with mobile browser vulnerabilities.
Key Statistics
  • The global phishing click rate across all devices was 12.88%, compared with a four-quarter average of 12.86%.
  • The reported encounter rate was 16.07% for iOS devices and 7.78% for Android devices.
  • The reported encounter rate was 12.63% for MDM-managed devices and 13.61% for unmanaged devices.

CVE

CVE-2024-10826CVE-2024-10827CVE-2024-12053MultiApp-CVE-2024-12053CVE-2024-12381CVE-2024-12382CVE-2024-7971MultiApp-CVE-2024-7971CVE-2024-9602CVE-2024-9603CVE-2024-9954CVE-2024-9966CVE-2025-0434CVE-2025-0438CVE-2025-4609CVE-2025-4664CVE-2025-5419MultiApp-CVE-2025-5419CVE-2025-6554MultiApp-CVE-2025-6554

Vendors

GoogleType confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

Products

AndroidAs observed consistently across previous quarters, iOS devices experienced significantly higher exposure than Android devices:Google ChromeType confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.iOSAs observed consistently across previous quarters, iOS devices experienced significantly higher exposure than Android devices:

Related Articles