Like any device connected to the Internet, mobile devices are also threatened by malware. Compared to client operating systems like Microsoft Windows, the risk of infection is lower, but attackers are increasingly concentrating on mobile devices. In particular, if apps are obtained from untrusted sources or updates for known vulnerabilities are not available, there is a risk of infection. If a device is infected, attackers can (for example) extract, modify, or delete data; access an organisation's internal IT resources; or act on behalf of the owner or the organisation.