skip to content

You’re Not Secure Until Samsung Knox Secures You

21-08-2026

Built-in device protection emerges as critical first line of defence against rampant scams, phishing and evolving digital threats.

As online scams become more sophisticated, smartphones are increasingly becoming the first point of contact between criminals and potential victims. Fake identities, social engineering tactics and AI-driven scams are changing the way cyber threats unfold, underscoring the growing importance of securing everyday digital devices as the first line of defence for Malaysian consumers and businesses.

Malaysia has seen a sharp rise in online scam cases, with Inspector-General of Police Tan Sri Mohd Khalid Ismail noting that 66,204 cases were recorded in the first half of 2026 alone — an 87% increase over the same period in the previous year. The financial damage has been staggering. Victims lost RM2.97 billion in 2025, up RM1.40 billion from 2024 with phone scams remaining among the most frequently reported cases.1

For many Malaysians, the smartphone is where most scams start. Samsung’s Knox security platform is designed around this reality, providing protection directly on the device rather than relying on users to identify threats for themselves.

  • One example is Samsung Message Guard2, which helps detect and isolate potentially harmful content received through messages. The feature is designed to prevent malicious files from exploiting device vulnerabilities. Google Play Protect3 also works alongside it by scanning applications for malware.
  • Samsung Knox4 includes security features that monitor device behaviour in real time, helping detect suspicious activity and limit abnormal actions. Technologies such as Real-time Kernel Protection monitor system-level activity, while Samsung Defeat Exploit (DEFEX) helps restrict unusual application behaviour.
  • Samsung added that selected devices can receive up to seven years5 of security updates for selected models, helping users maintain stronger protection as threats continue to evolve.

This same approach carries through to Samsung’s newly launched Galaxy Z Fold8 Ultra, Galaxy Z Fold8 and Galaxy Z Flip8, with Samsung Knox enabled by default from the moment each device is switched on.

  • The new foldables introduce Knox Vault, a tamper-resistant hardware vault that isolates passwords, biometric data and other sensitive credentials from the rest of the device, alongside Knox Enhanced Encrypted Protection (KEEP), which creates dedicated encrypted storage for individual apps.
  • Running on One UI 9, the Galaxy Z Series comes equipped with Privacy Alerts that flag suspicious background permission requests.

Malaysian organisations reportedly lost more than RM7.5 million from Business Email Compromise incidents between 2023 and the first half of 2025. During the first half of 2025, Malaysia also recorded 190,556 exploit attempts targeting businesses, according to data reported by Bernama; citing Kaspersky findings.6

For organisations managing hundreds or thousands of devices, security simply has to extend beyond individual phones.

  • Samsung Knox provides enterprises with hardware-backed protection, centralised management tools and greater visibility over devices connected to their networks. Through Knox Suite7, IT teams can monitor device health, manage updates and strengthen security controls across large fleets.
  • Tools such as Knox Asset Intelligence Security Center8 provide visibility into device performance and security conditions, while Knox E-FOTA9 allows organisations to manage operating system updates more systematically. Knox Device Health Attestation also helps verify whether devices meet required security standards.
  • Samsung Knox further supports a Zero Trust approach, where access is continuously verified instead of automatically trusted.
  • This includes hardware-backed Knox On-Device Attestation for Microsoft Intune Mobile Application Management (MAM)10 device verification, secure access controls and Privacy-filtered, MITRE ATT&CK-mapped threat monitoring11 in Knox Asset Intelligence for Microsoft Sentinel12 and other SOC/IT platforms.

Security can no longer be something added later. It has to begin with the device itself. For Samsung, protecting users and organisations in today’s environment requires technology that works quietly in the background — identifying risks, blocking threats, and helping Malaysians stay safer online.


  1. Data presented by Inspector-General of Police Tan Sri Mohd Khalid Ismail at the Combat Scam: Two Teams, One Goal campaign launch event in Kuala Lumpur on 15 June 2026. ↩︎
  2. Regardless of whether Samsung Auto Blocker is turned on or off, Message Guard is always enabled for Samsung Messages and Google Messages. ↩︎
  3. Google Play Protect is a trademark of Google LLC. ↩︎
  4. Knox is available on select Samsung appliances and devices only. Feature availability varies by model and region. ↩︎
  5. Availability and timing of Android OS upgrades and security updates may vary by market, network provider and/or model. ↩︎
  6. Source: Kaspersky Asia Pacific. ↩︎
  7. Offers, features, services and availability may vary by market, third-party solution and/or device. ↩︎
  8. Knox Asset Intelligence is a paid offering available through Knox Suite Plans. ↩︎
  9. Knox E-FOTA is a paid offering available through Knox Suite Plans. Availability varies according to location. View full list of locations at https://www.samsungknox.com/en/solutions/it-solutions/samsung_e-fota/supported-locations.Knox E-FOTA is a paid offering available through Knox Suite Plans. Availability varies according to location. View full list of locations at https://www.samsungknox.com/en/solutions/it-solutions/samsung_e-fota/supported-locations. ↩︎
  10. Supported on select Samsung Galaxy smartphones and tablets, including “Security by Knox” devices with Android OS 10 or later. To be eligible, devices must have run Android OS 9 or later at time of launch. ↩︎
  11. MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for the development of specific threat models and methodologies across the cybersecurity community. ↩︎
  12. Supports Samsung Galaxy devices running Android 15 or higher, configured as fully managed devices, or devices with a work profile. ↩︎
top