Over 143,000 Malware Files Target Android and iOS Users in Q2 2025

In the second quarter of 2025, Android and iOS users faced sustained threat activity, with Kaspersky Security Network reporting nearly 143,000 malicious installation packages detected across its mobile security products. According to Kaspersky Security Network, the overall number of mobile attacks—encompassing malware, adware and potentially unwanted software—dropped to 10.71 million in Q2, with Trojans remaining the predominant danger at 31.69 percent of all detected threats.

Between April and June 2025, Kaspersky solutions blocked 10.71 million mobile attacks, a decline from Q1 largely due to a reduced spread of RiskTool.AndroidOS[.]SpyLoan loan apps embedded with data-harvesting frameworks. Within this period, 142,762 installation packages were identified for Android malware and unwanted apps, including 42,220 mobile banking Trojans and 695 mobile ransomware Trojans; Mamont dominated the banking Trojan landscape, while Spy Trojans waned amid the decline of Agent[.]akg and Agent[.]amw.

New threats emerged, such as a cross-platform stealer dubbed SparkKitty that exfiltrates images, and a OTP‑theft Trojan masquerading as a privacy VPN client. Regionally, Türkiye saw over 97 percent of targeted users hit by Coper Trojans, India experienced 95 percent, Uzbekistan 85–87 percent, and Brazil saw Pylcasa droppers redirecting victims to phishing.