{"id":98384,"date":"2023-09-13T14:20:47","date_gmt":"2023-09-13T18:20:47","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=98384"},"modified":"2023-09-13T14:20:48","modified_gmt":"2023-09-13T18:20:48","slug":"temu-malware-byod","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/temu-malware-byod","title":{"rendered":"TEMU May Be Watching. Are You?"},"content":{"rendered":"\n
CNBC recently reported<\/a> that TEMU, an online shopping app with trendy items for sale at tantalizingly low prices, silently installs spyware onto devices once downloaded. According to Grizzly, the firm that performed this analysis, it\u2019s undetectable by conventional measures, so your traditional antivirus software likely won\u2019t catch it. It runs in the background, mining any data you keep on your device.<\/p>\n\n\n\n Whether this is true or not, the idea that popular consumer-based apps could contain additional software like this raises security concerns \u2014 not just to individual users, but also to companies whose employees access company resources with personal devices. As the world becomes more digital and hybrid, personal devices in the workplaces are almost a given. <\/p>\n\n\n\n So, how can companies protect themselves? <\/p>\n\n\n\n We do a lot on our phones. We log into accounts, buy things, check our bank accounts, access patient portals\u2026 the list goes on. If spyware makes it on to your phone, all of that data is at risk of being mined, sold, and compromised. <\/p>\n\n\n\n Personal data theft isn\u2019t the only risk, though. As personal devices become more prevalent in the workplace, spyware could infiltrate company information as well. Even if employees are only using their device to log into their company email, the spyware could catch their company email address, password, company contacts, and potentially sensitive email contents. That\u2019s a lot of data.<\/p>\n\n\n\n And this isn\u2019t the only allegation out there. Tik Tok, for example, has often been in the spotlight for suspicions of data theft<\/a>. In fact, several countries have banned Tik Tok<\/a> from official devices in government institutions.\u00a0<\/p>\n\n\n\n The fact is that personal device use is expanding, and malware is exploiting this trend with increasingly sophisticated and predatory tactics. <\/p>\n\n\n\n It can be tempting to put a ban on anything and everything suspicious. And for company-managed devices, this may be feasible. However, companies are limited in their ability to restrict what goes on personal devices. This can create a massive security gap.<\/p>\n\n\n\n So, how can companies protect themselves?<\/p>\n\n\n\n At JumpCloud, we\u2019re fans of the \u201copt-in\u201d approach to BYOD devices in the workplace. That is, if employees decide they want to use their personal devices for work, they must opt into the company\u2019s BYOD program and abide by its policies. In this model, employees are also welcome to opt out. By doing so, they agree not to access any company resources or data with their personal device, which remains unrestricted.\u00a0<\/p>\n\n\n\nThe Massive Risk to Companies <\/h2>\n\n\n\n
How Can You Protect Company Data?<\/h2>\n\n\n\n