A leading security firm is reporting a sharp rise in cyberattacks targeting Android devices, with over 12 million attempts to steal bank credentials, personal data and other malicious activities detected in just three months.
In a new report, the cybersecurity firm Kaspersky says 2025 kicked off with an alarming number of smartphone attacks.
“Attacks on Android devices involving malware, adware or potentially unwanted apps in the first quarter of 2025 increased to 12,184,351.”
That’s up from 8,780,221 attacks in the last three months of 2024.
Trojans, a type of malware that appears harmless but secretly performs malicious actions like stealing data or enabling unauthorized access, were the most common mobile threat, accounting for 39.56% of total detected threats.
The sudden increase in attacks is largely attributable to the banking trojan known as Mamont, as well as scam apps.
Other reasons for the attack surge include counterfeit versions of popular smartphones that come preloaded with an Android malware called Triada.
“This growth was largely due to the activity of Mamont banking trojans and fake money scam apps, along with the discovery of fake popular brand smartphones that came preloaded with the Triada backdoor, capable of dynamically downloading any modules from a server.”
Kaspersky also says there were 180,405 malicious and potentially unwanted Android app installation packages detected in the first quarter of 2025, up from 141,779 in the last quarter of 2024.