
tl;dr
A leading security firm, Kaspersky, reports a sharp rise in cyberattacks on Android devices, with over 12 million attempts to steal bank credentials and personal data detected in the first quarter of 2025, up from 8.7 million in the last quarter of 2024. Trojans, especially the Mamont banking trojan...
Cyberattacks on Android devices surged to over 12 million in the first quarter of 2025, marking a significant increase from 8.7 million attacks in the last quarter of 2024. This spike, reported by the cybersecurity firm Kaspersky, highlights a growing threat landscape targeting mobile users worldwide.
The primary culprits behind this rise are banking trojans, particularly the Mamont trojan, and scam applications, which together account for nearly 40% of detected threats. These trojans disguise themselves as harmless software but stealthily steal sensitive data such as bank credentials and personal information.
Another key factor driving the attack surge is counterfeit smartphones preloaded with the Triada malware. These fake devices come equipped with a backdoor that can dynamically download additional harmful modules from remote servers, amplifying the risk to users unknowingly purchasing such counterfeit products.
In parallel with the increased cyberattack attempts, the number of malicious and potentially unwanted Android app installations also rose sharply. Kaspersky detected 180,405 suspicious app packages in early 2025, compared to 141,779 in the final months of 2024, signaling a widening attack surface on Android platforms.
This alarming trend underscores the growing complexity and scale of mobile cyber threats, urging Android users to exercise heightened caution when downloading apps and purchasing devices. With banking trojans and malware preloaded on counterfeit phones leading the charge, vigilance in cybersecurity remains paramount.