Mobile Banking, the New Favorite of Cyber ​​Attackers: Attacks Increased by 56%

According to the "Evolution of Mobile Threats” report published by Kaspersky, banking Trojan attacks targeting smartphones with Android operating systems will increase in 2025 compared to the previous year. It increased by 56%. These malware are designed to steal user information from online banking, e-payment services and credit card systems; It is generally spread by cybercriminals through messaging applications and infected web pages.

The number of new banking Trojan installation packages, consisting of unique APK files developed for the Android platform, reached 255,090, a sharp increase of 271% compared to 2024. This indicates that these tools have become a serious source of income for cybercriminals. Kaspersky experts predict that threat actors will continue to expand their distribution channels and develop new variants to evade security solutions. 

While Mamont and Creduz families lead the world; Users in Turkey are frequently faced with the Coper Trojan horse and its carrier, the Hqwar dropper software, designed to capture sensitive financial data.

Kaspersky Malware Analysis Team LeaderAnton Kivva, made the following evaluations on the subject: “Although banking Trojans targeting smartphones are the fastest growing type of threat, We observe another critical trend: Triada and Keenadu are appearing much more frequently than in previous years. While users think they are purchasing a completely new device, they may actually receive an Android device infected with malware at the production stage and not be aware of this threat. As a result, these backdoors integrated into the device software give attackers unlimited control over the user's device. Data is compromised. It is very difficult to clean such software. If the device is suspected to be infected, we recommend that users first check for firmware updates. After the update, it is of great importance to run a comprehensive security scan of the device to ensure that the new software is clean. But remember; Even official stores may not always be 100% risk-free.

Learn more about the 2025 mobile threat landscape Securelist .

*These statistics are based on detection data from Kaspersky's Android products. Data from previous years may differ due to data and methodology updates. These changes affected all sections of Kaspersky mobile reports, except statistics for installation packages.