Kaspersky detects 162,000 mobile banking Trojans in Q1 2026

Kaspersky has detected 162,275 new mobile banking Trojan installation packages in the first quarter of 2026. This figure represents more than double the total recorded throughout 2024 and is equivalent to approximately two-thirds of the total mobile banking Trojans detected during the entire year of 2025.

Banking Trojans accounted for 52.96% of all malicious mobile applications detected by Kaspersky in Q1 2026, a significant increase from approximately 31% in 2025. During this same period, the company blocked over 2.67 million attacks involving malware, adware, and unwanted mobile software. Additionally, 306,070 malicious installation packages were identified, including 439 related to mobile ransomware Trojans.

Cybercriminals are employing increasingly sophisticated methods to distribute these threats, including unofficial app stores, phishing links, fake prize offers, modified official applications, and malicious advertising. Experts noted that pre-installed backdoors in device firmware, such as Triada and Keenadu, remain frequent threats. The rise in attacks highlights that mobile devices have become primary targets due to the sensitive personal, financial, and professional data they contain.