Malwarebytes EDR for Mobile devices

Malwarebytes EDR for Mobile devices

Deployment overview for Mobile Security for Business

Mobile Security secures and manages mobile devices from your Nebula console. Begin deployment by sending an email from Nebula or configuring a Mobile Device Management tool. Then, have your end users complete the process from their mobile device. 
  1. Add devices. For more information, see Add mobile endpoints in Nebula.
  2. Install and activate. For more information, see Install Mobile Security for Business on mobile devices.
  3. Enable system permissions. For more information, see System permissions for Mobile Security for Business. 
Once installed, the mobile endpoint agent checks in with Nebula once every 24 hours. Additionally, check-ins occur when the app is launched by the user or a command is made by an admin. 

NOTICE - Mobile Security for Business is intended for use on corporate mobile devices. Customers are responsible for making sure the app's use is compliant with all applicable laws and it has obtained any necessary consents, including, but not limited to, where Customers have a corporate "bring-your-own-device" program.

System permissions for Mobile Security for Business

To complete the deployment on mobile endpoints, the end user is required to enable system permissions on their device manually. This article details the system permissions necessary to run the Mobile Security for Business app. 

Android and ChromeOS permissions

After installation and activation, a screen displays instructions on changing permissions. The end user must tap Adjust settings under each item to grant system permissions.
PermissionDescription

Storage permission

Provides access to the file storage to scan for malicious files.
Keep permissions for unused appsProtects your device keep permissions even if the app is not used for a few months.
Background exclusion required

Required to start scans, services, and show alerts.

Display over other apps

Allows the app to display critical alerts. Without this permission, the app cannot notify you of incoming threats or malicious sites.

Access usage data

Allows the app to monitor other apps for threats and privacy issues.

Limit other apps

Prevents other apps from turning off the Mobile Security for Business app.

Notifications

Allows the app to display notifications. 

iOS and iPadOS permissions

After installation and activation, a screen displays instructions on changing permissions. The end user must navigate to the device's Settings > Safari > Extensions to grant system permissions.

PermissionDescription

Web Protection

Enables a content blocker to protect Safari browser from malicious and suspicious websites.

Ad Blocking

Enables a content blocker to prevent Safari from loading ads and block ad trackers.

Add mobile endpoints in Nebula

Manage and protect mobile devices from the Nebula console by adding Android, ChromeOS, and iOS endpoints. The deployment options include Mobile Device Management (MDM) to automate the installation and token activation, and Email sharing to deploy to individual recipients. With Email sharing, the end user must manually complete the deployment process.

Mobile Device Management

Use an MDM tool to automate the deployment of Mobile Security for Business. This removes the need for end users to manually complete the installation and enter an activation token. System permissions must still be manually enabled. 

Adding an application

Mobile Security for Business supports the following MDM tools. For guidance on adding an application to your MDM tool, see the options below:
Android and ChromeOSiOS

Generating and adding the configuration token

After adding the application to an MDM tool, generate the configuration token in Nebula and add it to the MDM tool using the steps below:
  1. On the left-navigation menu, click Download Center.
  2. Select Mobile - iOS, Chrome, Android from the platform drop-down menu.
  3. Click MDM Deployment.
  4. Click the copy to clipboard  button next to the desired operating system.
  5. Paste the configuration token into your MDM application.
  6. To complete the deployment, the device user must manually enable system permissions. For details, see System permissions for Mobile Security for Business.
For more information on adding the configuration token to an MDM, see the table below: 
Android and ChromeOSiOS

Email sharing

To send the installation and activation information to individual recipients:
  1. On the left-navigation menu, click Download Center.
  2. Select Mobile - iOS, Chrome, Android from the drop-down menu.
  3. Click Email Sharing.
  4. Enter the email address of the recipient and click Add another recipient  to continue adding more. To upload a CSV file instead:
    1. Click Upload list.
    2. Download and modify the provided example template
    3. Upload the file.
    4. Click Done.
  5. Click Send email.
  6. An email is sent to the recipients to install and activate Mobile
  7. Security for Business. To continue with deployment, the device user must complete the installation instructions.

Install Mobile Security for Business on mobile devices

To deploy via Email sharing, the end user must manually complete installation, activation, and grant system permissions for Mobile Security. After configuring Email Sharing, end users receive an email with installation and activation instructions.

For the complete deployment process, see Deployment overview for Mobile Security for Business.

To install the app, end users are required to complete the following steps.
  1. Use the mobile device to locate and open the installation and activation email.
  2. Click the installation link in the email to access the App store for the device. 
  3. Locate Malwarebytes for Business in the App store. Tap Install or Get to install the app.
  4. Once installation is completed, users must Open the app.
  5. Review the Malwarebytes Privacy Policy and tap Accept and continue. The activation screen displays.
  6. Return to the installation and activation email on the device.
  7. Click the activation link matching the device's OS or copy and paste the activation token into the field to activate the app. The permissions screen displays.
  8. Users must enable system permissions manually to complete the deployment. 

    • Related Articles

    • Malwarebytes - Installing EDR Agent on Chrome OS

      1. The Malwarebytes EDR Application can be downloaded from the Google Play Store Application: Malwarebytes "ThreadDown" Application. Alternatively, the Application can be found manually by: 1) Opening the Google Play Store Application. 2) Searching ...

    • MalwareBytes EDR - Requirements

      External Access Requirements If your company’s Internet access is controlled by a firewall or other access-limiting device, you must grant access for endpoint agents to reach Malwarebytes services. These are: URL PORT CONNECTION TYPE ...

    • Malwarebytes - Installing EDR Agent on MAC

      1. Locate the downloaded file Setup.MBEndpointAgent.(CBT Mac).pkg. In most cases, downloaded files are saved in, Downloads folder. 2. Double click on Setup.MBEndpointAgent.(CBT Mac).pkg to start the setup wizard. 3. The next screen shows the ...

    • Installing EDR Agent on MAC

      Installing EDR Agent on MAC 1. Locate the downloaded file Setup.MBEndpointAgent.(CBT Mac).pkg. In most cases, downloaded files are saved in, Downloads folder. 2. Double click on Setup.MBEndpointAgent.(CBT Mac).pkg to start the setup wizard. 3. The ...

    • MalwareBytes - Installing EDR Agent on Linux

      Account Token is required Debian 8 (most frequently used) Install: sudo touch /etc/apt/sources.list.d/mblinux.list; echo 'deb [arch=amd64] https://repositories.mwbsys.com/dpkg jessie non-free' | sudo tee -a /etc/apt/sources.list.d/mblinux.list; wget ...