Ravi Sir's Cyber Security Cards › Revision Cards
Mobile Threat Model – What Can Go Wrong
Mobile Threat Model – What Can Go Wrong A phone is a small computer with your SIM, mic, camera and bank apps. The main risks for most people. A lost phone with a weak lock. Sideloaded junk apps. Bad public Wi-Fi . Rarely, targeted spyware. In May 2019, WhatsApp reported a spyware issue where a craft
Read card text
What this card says
What it is
A phone is a small computer with your SIM, mic, camera and bank apps. The main risks for most people.
Everyday risks
A lost phone with a weak lock. Sideloaded junk apps. Bad public Wi-Fi.
Rarely, targeted spyware.
Real incident
In May 2019, WhatsApp reported a spyware issue where a crafted call could target some phones.
Lesson: keep the OS updated, and lock the phone well.
| Threat | Simple picture | Blue first move |
|---|---|---|
| Lost / stolen device | Thief has the glass | Strong screen lock + encryption at rest + Find My / remote… |
| Malware / rogue APK | Fake "update" or cracked app | Store installs; Play Protect / review; no unknown APK |
| Phishing / OTP steal | Fake SMS / call / page asks OTP | Never share OTP; check URL; bank app from official store |
| Network attacks | Evil twin Wi-Fi, captive portal | Prefer HTTPS; VPN on untrusted nets; skip odd portals |
| Account takeover | Email / Apple / Google session stolen | MFA; revoke sessions from a clean device |
Learn more in the lesson: 44.1 Mobile Threat Model – What Can Go Wrong