iOS gets more phishing attacks than Android, study reveals

Cybersecurity is a topic increasingly present in the public’s mind. There are companies that have tried to raise awareness among users about safe practices when using their internet-connected devices. On smartphones, Apple’s pro-privacy approach has given iOS an “aura” of greater security or robustness against potential attacks. However, it seems that iOS is actually more prone than Android to getting malicious attacks.

The cybersecurity platform Lookout carried out an extensive study related to the current state of cybersecurity on mobile devices. Lookout’s database offers a large sample of more than 220 million mobile devices. So, the results can offer a valid view of the overall picture. The research considered both simple attacks based on social engineering—phishing—and attacks based on complex methods and advanced tools.

Malicious attack attempts target more iOS devices than Android’s

The Lookout team found that, during Q3 2024, the theft of credentials on mobile devices increased by 17%. There was also an increase in phishing-based attacks on enterprise devices compared to Q2 2024. Plus, 32% more malicious apps were detected compared to the previous quarter.

Another rather interesting finding is that iOS devices were more prone to malicious attacks than Androids. This applies mainly to the enterprise environment. According to the source, 19% of enterprise iOS devices received at least one phishing attack during the period studied. For reference, 10.9% of enterprise Android devices suffered from such attacks.

That said, it is possible that the difference is due to a greater presence of iOS devices in enterprise environments. One of the priorities of company IT teams is software homogeneity. This is a breeze to achieve on iOS since its updates are usually available for all eligible models from day one. On Android, you could only do this by purchasing a specific model. Apple offers more versatility by rolling out updates for multiple generations of iPhones on the same day.

Nonetheless, assuming equal conditions, the number of attempted phishing attacks on iOS and Android would likely be comparable. This suggests that Android may be just as secure as Apple’s mobile OS for enterprise use. However, it is the software’s homogeneity that is pushing companies toward iPhones.