According to a recent report by Zscaler, a cloud security vendor, there has been a 67% year-on-year jump in Android malware attacks.
The data also highlighted that 239 malicious Google Play apps were downloaded more than 42 million times.
The findings reveal a significant increase in malware attacks targeting Android devices and IoT endpoints, with threat actors increasingly focusing on critical industries and environments supporting hybrid work
The Zscaler ThreatLabz 2025 mobile, IoT, and OT threat report stated the Google Play incidents targeted users searching for productivity and workflow apps. The malicious apps were mostly disguised as these types of tools.
Deepen Desai, EVP and CSO at Zscaler, stated “attackers are pivoting to where works gets done,” which includes phones and connected equipment.
The report also found threat actors are moving away from card-focused fraud to targeting mobile payments.
Manufacturing and transportation accounted for 40 per cent of all observed IoT malware attacks, indicating cybercriminals are diversifying their focus across high-dependency sectors.
The energy sector saw a dramatic 387 per cent increase in attacks compared to the previous year, signalling escalating risks to critical infrastructure.
India remains the top target for mobile attacks, with a 38 per cent increase in threats. It experienced 26 per cent of mobile attack traffic, followed by the United States (15 per cent) and Canada (14 per cent).
The US was the epicentre for IoT attacks, receiving 54.1 per cent of global IoT malware traffic.
Zscaler’s report covered more than 20 million threat-related mobile transactions from June 2024 to May 2025.
Source: Mobile World Live
Image Credit: Stock Image