Kaspersky Detects Surge in Mobile Banking Trojan Packages

September 16, 2026: Kaspersky’s latest findings, based on anonymized data from Kaspersky Security Network, reveal that cybercriminals are intensifying efforts to exploit growing reliance on mobile devices for shopping, entertainment, communications, and work.

In Q1 2026, Kaspersky blocked more than 2.67 million attacks involving malware, adware, and unwanted mobile software, while detecting 306,070 malicious installation packages, including 439 associated with mobile ransomware Trojans. Preinstalled backdoors such as Triada and Keenadu also ranked among the most frequently encountered mobile threats.

The figures build on a broader trend observed in 2025, when Kaspersky solutions blocked more than 14 million mobile attacks globally, averaging approximately 1.17 million attacks per month. Attackers are increasingly using legitimate online services and trusted tools to evade detection, with attacks often unfolding through multiple stages.

“Cybercriminals are increasingly leveraging sophisticated techniques to distribute malicious mobile applications through unofficial app stores, phishing links, fake giveaways, modified legitimate applications, malicious advertising campaigns, and mobile scam schemes designed to trick users into revealing sensitive information,” said Choon Hong Chee, Head of Consumer Channel for APAC at Kaspersky.

Separate research found that a successful messaging-app scam costs victims an average of US$733, with 52% completed within 30 minutes. Kaspersky recommends installing apps only from trusted marketplaces, avoiding suspicious links, keeping devices updated, verifying requests for personal information, and using dedicated mobile security solutions.