AI‑Powered Mobile Phishing Costs €442 Billion, Banking Trojans Spike Worldwide

Industry analysts warn that mobile cybercrime driven by artificial intelligence is generating around €442 billion in global losses, with roughly 3.4 billion fraudulent messages sent to smartphones each day. About 86 % of phishing campaigns now use AI to craft convincing content, undermining traditional awareness defenses.

Banking‑trojan attacks have surged, rising 196 % in the first quarter of 2026 to about 1.24 million incidents. The Mamont trojan is linked to more than 70 % of Android‑based attacks, targeting one‑time passwords and transaction authorisation. New vectors such as quishing (QR‑code phishing) grew 150 % to 18 million cases, and malicious apps disguised as legitimate software have been downloaded 24 million times from the Google Play Store.

Regulators and tech firms are responding. Germany plans an EUDI digital‑identity wallet from 2027, while Microsoft, Apple and Google are moving away from SMS‑based two‑factor authentication toward biometric passkeys and enhanced device‑level protections. Apple’s iOS 26.5 update patches 52 vulnerabilities, and Google’s Play Protect now blocks identified fraudulent apps.