Zimperium Warns Mobile Cyber Threats Targeting Travelers

With summer travel on the rise, Zimperium is warning of growing mobile cyber threats aimed at employees on the go. New threat intelligence from the company reveals that over 5 million unsecured public Wi-Fi networks have been identified worldwide in 2025 alone, with 33% of users still connecting to them, putting sensitive enterprise data at significant risk.

“Mobile devices are now a primary gateway to corporate data, but during travel, they’re also the most vulnerable,” said Kern Smith, VP of Global Solutions at Zimperium. “Unsecured Wi-Fi, phishing disguised as travel alerts, and risky sideloaded apps are creating an ideal attack surface for cybercriminals—especially in peak travel months.”

Global Hotspots and Rising U.S. Threats

Zimperium researchers have identified significant spikes in mobile malware activity across Southeast Asia, with Vietnam, Malaysia, and the Philippines experiencing some of the highest infection volumes. Notably, Luxembourg has emerged as a global outlier, with a sharp rise in mobile malware targeting travelers and compromising corporate devices.

In the U.S., major cities like Los Angeles, New York, Portland, Miami, and Seattle are now seeing increased levels of mobile threats, driven by high numbers of business and vacation travelers, high mobile usage, and widespread unsecured network access. For enterprises with mobile workforces, this trend represents a growing risk of data exposure and potential breach.

Mobile Threats Amplified by Travel

According to the Zimperium 2025 Global Mobile Threat Report, attackers are actively shifting to a mobile-first attack strategy. The most common threats facing traveling employees include:

Man-in-the-Middle (MiTM) Attacks via public or rogue Wi-Fi
Phishing disguised as travel alerts, such as fake itineraries or boarding passes
Risky sideloaded apps downloaded during travel
Captive portals collecting emails or phone numbers, increasing phishing risk

“These are not hypothetical threats. They’re happening now, and they’re hitting devices that may lack even basic protection,” said Kern Smith.

Call to Action for Enterprises

Zimperium urges organizations to ensure visibility into all mobile endpoints, enforce device compliance, and block connections to unsecured networks. Businesses are encouraged to adopt enterprise-grade mobile threat defense to protect employee devices during travel.

For more details read the mobile cyber threats targeting travelers Summer Travel Blog here.

Zimperium Leads Expansion of the World’s Top Mobile Security Platform