Do you connect to networks with your mobile device? If so, tune into this session. The team who uncovered iOS malicious profiles, WiFiGate and HTTP Request Hijacking (uncovered in RSA Europe ’13) and Invisible Profiles (uncovered at RSA USA ’14) will describe and demonstrate modern mobile attack techniques and the seismic shift and evolution of cyber theft. Hold on to your seats as we expose statistics about real-world attacks on mobile-devices around the world. Adi and Yair will provide a deep analysis of several concrete network-based attacks against mobile devices and will outline how they might be mounted from Wi-Fis and cell towers. The format of the presentation will be a discussion with unique insight from the trenches (with alive attack demonstration) and a mitigation strategy. Additionally the session will address: Automatic connections. Getting devices to automatically connect to an attacker-controlled network and the implications to large-scale devices. Captive portal handling. Advanced attacks and exploitation that include launching apps with no user intervention to steal credentials, HTTP Request Hijacking exploitation, cache poisoning, and more. Emerging threats. New vulnerabilities, including iOS8. Real world statistics. A showcase on statistics of attacks currently being performed and attack-patterns uncovered by our crowd-sourcing engine.