Mobile Banking Cyberattacks Jump 56% in 2025: Report

The number of Trojan banker attacks on Android smartphones increased by 56% in 2025 compared to the previous year. According to a Kaspersky report, “Mobile malware evolution,” this malware is designed to steal user credentials for online banking, e-payment services, and credit card systems.

Cybercriminals often spread Trojan bankers through messaging apps and malicious webpages. The number of new Trojan banker installation packages for Android also rose sharply, reaching 255,090 packages – a 271% increase over 2024.

Experts say attackers will likely continue to expand delivery methods and create new Trojan variants to evade detection. Among detected Trojan bankers, the leading families were Mamont and Creduz.

The report also highlighted another trend: preinstalled backdoors, such as Triada and Keenadu, appeared more often than in previous years. Anton Kivva, malware analyst team lead at Kaspersky, explained:

“People purchase a completely new, but infected, Android device and may be unaware of the threat. Once integrated into the firmware, fully functional preinstalled backdoors provide attackers with unlimited control over the victims’ smartphones and tablets. As a result, all information on infected devices can be compromised. It’s quite difficult to remove such malware. If the device is infected, we recommend users check for firmware updates. After the update, run a scan of the device with a security solution again to make sure the newly installed firmware is not infected.”

To stay protected from mobile threats, Kaspersky recommends:

• Download apps only from official websites and app stores, like Apple App Store and Google Play.

• Install reliable security software, such as Kaspersky Premium, to detect and block malicious activity.

• Check app permissions carefully, especially high-risk permissions like Accessibility Services.

• Update your operating system and important apps regularly to fix security issues.

Following these steps can help users reduce the risk of mobile malware and protect personal information.