IT threat evolution in Q3 2025. Mobile statistics - Malware News
- Nov 19, 2025
- 2 min read
Key Findings
In Q3 2025, Kaspersky Security Network prevented 47 million attacks involving mobile malware, adware, or unwanted software.
Trojans were the most widespread mobile malware, affecting 15.78% of attacked users.
Over 197,000 malicious installation packages were discovered, including 52,723 associated with mobile banking Trojans and 1,564 identified as mobile ransomware.
Background
The Kaspersky Security Network (KSN) is a global network for analyzing anonymized threat information, voluntarily shared by users of Kaspersky solutions. The statistics in this report are based on KSN data unless explicitly stated otherwise.
Quarterly Highlights
The number of malware, adware, or unwanted software attacks on mobile devices totaled 3.47 million, slightly less than the 3.51 million attacks in the previous quarter.
A new version of the BADBOX backdoor was discovered, preloaded on a user's device and infiltrating every process running on the device.
Trojan-Downloader.AndroidOS.Agent.no was found embedded in mods for messaging and other apps, downloading Trojan-Clicker.AndroidOS.Agent.bl onto devices to artificially inflate ad views.
Mobile Threat Statistics
Kaspersky detected 197,738 samples of malicious and unwanted software for Android, 55,000 more than the previous quarter.
Banking Trojans, still dominated by Mamont packages, continue to hold the top spot, although their share decreased slightly.
Adware led in terms of the number of users attacked, with HiddenAd (56.3%) and MobiDash (27.4%) being the most widespread.
Trojans Triada (55.8%) and Fakemoney (24.6%) remained the most popular among users.
Top 20 Most Frequently Detected Mobile Malware
1. Trojan.AndroidOS.Triada.ii (13.78%)
2. Trojan.AndroidOS.Triada.fe (10.32%)
3. Trojan.AndroidOS.Triada.gn (8.56%)
4. Trojan.AndroidOS.Fakemoney.v (6.30%)
5. Backdoor.AndroidOS.Triada.fs (5.99%)
6. Trojan.AndroidOS.Triada.dh (5.81%)
7. Trojan.AndroidOS.Triada.bd (5.22%)
8. Trojan.AndroidOS.Agent.fy (4.29%)
9. Trojan.AndroidOS.Triada.dz (4.11%)
10. Trojan.AndroidOS.Triada.dy (3.92%)
11. Trojan.AndroidOS.Triada.dw (3.84%)
12. Trojan.AndroidOS.Triada.df (3.81%)
13. Trojan.AndroidOS.Triada.do (3.77%)
14. Trojan.AndroidOS.Triada.dj (3.72%)
15. Trojan.AndroidOS.Triada.dp (3.69%)
16. Trojan.AndroidOS.Triada.dn (3.62%)
17. Trojan.AndroidOS.Triada.ca (3.56%)
18. Trojan.AndroidOS.Triada.de (3.52%)
19. Trojan.AndroidOS.Triada.dg (3.43%)
20. Trojan.AndroidOS.Triada.dc (3.35%)
Sources
https://securelist.com/malware-report-q3-2025-mobile-statistics/118013/
https://securelist.com/malware-report-q3-2025-pc-iot-statistics/118020/
https://malware.news/t/it-threat-evolution-in-q3-2025-mobile-statistics/101725
https://www.reddit.com/r/SecOpsDaily/comments/1p14o7e/it_threat_evolution_in_q3_2025_mobile_statistics/
https://www.cybersecurity-review.com/it-threat-evolution-in-q3-2025-mobile-statistics/
https://x.com/TheCyberSecHub/status/1991084674610090172
Comments