Kaspersky detects 162,000 mobile banking Trojans in Q1 2026

Jakarta (ANTARA) - Kaspersky detected 162,275 mobile banking Trojan installation packages in the first quarter of 2026, more than double the number recorded throughout 2024.

In a statement received in Jakarta on Monday, Kaspersky said the figure is also equivalent to around two-thirds of the total mobile banking Trojan packages detected throughout 2025.

Banking Trojans accounted for 52.96 per cent of all dangerous mobile applications detected by Kaspersky in the first quarter of 2026, up from around 31 per cent throughout 2025.

Data from the Kaspersky Security Network also showed that Kaspersky blocked more than 2.67 million attacks involving malware, adware and unwanted mobile software during the period.

In addition, Kaspersky detected 306,070 dangerous installation packages, including 439 packages related to mobile ransomware Trojans.

Choon Hong Chee, Head of Consumer Channel Asia Pacific at Kaspersky, said cybercriminals are increasingly exploiting various methods to spread malicious applications, ranging from unofficial app stores, phishing links, fake prize offers and modified official apps to malicious advertisements.

“Cybercriminals are increasingly aggressively using sophisticated techniques to spread malicious mobile applications,” he said.

According to him, perpetrators are also more frequently abusing legitimate online services and trusted devices to evade detection. Such attacks are often carried out in several stages, beginning with a file, link or application that appears safe before proceeding to malicious activity.

Kaspersky’s findings build on the situation throughout 2025, when its security systems blocked more than 14 million mobile attacks globally, or an average of around 1.17 million attacks each month.

Kaspersky reminded users to install applications only from trusted app stores, avoid suspicious links and promotions, and regularly update their operating systems and applications.

Users are also advised to verify requests for personal information received through messaging applications and to use mobile security solutions to detect malicious activity in real time.