But if companies thought that getting their MDM server infected with DDoS malware was the worst thing that could happen, they thought wrong.

Research from Duo Labs however found that DEP only requires a serial number in order to enroll a device into an organization’s MDM server, which means that an attacker could enroll a rogue ...

Duo researchers say that flaws in the way DEP was designed allow an attacker to trick the authentication step and enroll a device of the attacker's choosing in an organization's MDM server.

Experts say that based on the MDM server's log, the attacker deployed four apps since 2015 when he first set up the server and started adding victims. The four apps he deployed are WhatsApp ...