Surge in Android Threats: Mobile Malware Spikes 151% in 2025

TL;DR

Android threats have surged significantly in the first half of 2025, with a 151% increase in mobile malware. This rise is marked by coordinated attacks, sophisticated malware, and targeted strategies. Key threats include spyware, SMS-based malware, and banking Trojans. Protective measures include keeping devices updated, avoiding sideloaded apps, and using security software.

Main Content

The Android threat landscape has evolved significantly in the first half of 2025, marked not just by an increase in volume but also by enhanced coordination and precision. Attackers are now building sophisticated ecosystems rather than relying on random malware distribution.

Recent data from Malwarebytes reveals a sharp rise in mobile threats, with malware targeting Android devices increasing by 151%. Spyware, which collects user data without consent, has seen a 147% increase, with notable spikes in February and March. SMS-based malware has surged by 692% between April and May, possibly due to seasonal scams like tax frauds and toll fee scams¹².

These trends indicate a shift in strategy: attackers are scaling operations, refining delivery methods, and exploiting both human psychology and systemic weaknesses. For example, the Spyloan threat lures victims with attractive loan conditions but ultimately steals from vulnerable individuals. Banking Trojans and spyware are now more prevalent than traditional nuisances like adware and riskware, showcasing increased sophistication.

Fake financial tools, predatory loan apps, and disguised updates are engineered to exploit periods of personal stress, such as tax season or holiday travel. Shahak Shalev, Sr. Director of Research and Development at Malwarebytes, explains:

Attackers know we trust our mobile devices implicitly—we bank on them, authenticate with them, store our entire digital lives on them. Now attackers are amping up the volume and sophistication of mobile threats. When spyware jumps 147% in five months, that tells us attackers are moving beyond simple scams to building sustainable criminal enterprises. They’re playing the long game now—developing monetization strategies for every type of data they can harvest; every user behavior they can exploit. The February spike shows this isn’t random, it’s methodical business development in the cybercrime space. 

Smishing (SMS phishing) has become a highly effective tool, using AI-generated text and well-crafted lures that are harder to spot. Additionally, PDF phishing attacks are on the rise, acting as entry points for broader compromises.

A significant issue is the lack of updates, with over 30% of Android devices running on outdated operating systems, making them vulnerable to attacks. Combined with counterfeit or gray-market devices preloaded with malware, this creates a recipe for widespread exposure.

The Android threat landscape has matured into a network of monetization schemes that thrive on scale, persistence, and user trust. Attackers are building long-term operations rather than seeking quick wins.

How to Protect Your Android Device

Mobile security cannot be an afterthought. Individuals and organizations must treat Android threats with the same seriousness as traditional desktop attacks. Key protective measures include:

• Prioritize Device Hygiene: Keep your device updated with the latest security patches.
• Avoid Sideloaded Apps: Download apps only from the Google Play Store.
• Be Cautious with Permissions: Carefully review the permissions requested by new apps.
• Use Security Software: Install and maintain up-to-date security software on your Android device³.

Google Play Protect is a built-in security feature that automatically protects users against malicious apps. However, malware campaigns can still infiltrate the Google Play Store. To keep your devices free from Android malware:

• Get your apps from the Google Play Store whenever possible.
• Be cautious about the permissions you allow a new app. Permissions like “Display over other apps” should raise a red flag.
• Avoid allowing notifications as much as possible to reduce the number of ads.
• Use up-to-date and active security software on your Android device³.

For more details, visit the full article: source

Conclusion

The surge in Android threats highlights the need for vigilant mobile security practices. By staying informed and proactive, users can protect themselves against these evolving cybersecurity risks. Prioritizing device hygiene, avoiding sideloaded apps, and using security software are essential steps in safeguarding Android devices.

References

1. (2025). “Urgent reminder: Tax scam wants to phish your Microsoft credentials”. Malwarebytes. Retrieved 2025-06-30. ↩︎

2. (2025). “New warning issued over toll fee scams”. Malwarebytes. Retrieved 2025-06-30. ↩︎

3. (2025). “Malwarebytes for Mobile”. Malwarebytes. Retrieved 2025-06-30. ↩︎ ↩︎²