Stay safe on mobile apps 

Attackers are increasingly targeting user accounts through stolen credentials, phishing and supply-chain exposures; with recent industry data showing credential abuse as a top entry path and third-party involvement in breaches doubling year over year.  Phishing and other identity-based attacks (including credential stuffing, QR-code scams and MFA-bypass techniques) continue to scale, so treat unexpected login prompts and links with caution.

Always be aware:

• Use strong, unique passwords every time and turn on 2‑step verification with an authenticator app; avoid approving push prompts you did not initiate—these measures are more resilient against phishing‑linked takeover attempts. 
• Update your phone and apps automatically. Exploited vulnerabilities are rising and remain a major initial access route; patching quickly to reduces risks and vulnerabilities.
• Install only from official app stores and review permissions (camera, mic, location); excessive permissions and sideloaded apps raise exposure to mobile malware and data leakage.
• Beware of smishing/QR‑phishing. Don’t tap trading links from messages—open your app directly and verify any prompts.