Skip to content
Surge in Smartphone Malware Infections in Russia Driven by Trojans

Surge in Smartphone Malware Infections in Russia Driven by Trojans

First seen 30 Jun 2026, 22:35 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 1, 2026 at 22:34 UTC
  • •Smartphone malware infections in Russia rose 70% in early 2026 compared to 2025.
  • •The Mamont banking trojan is responsible for 15% of all detected infections this year.
  • •Approximately 1.5 million Android devices in Russia are compromised by malware.

In the first half of 2026, smartphone malware infections in Russia increased by 70% compared to the same period in 2025, as reported by Kommersant. The primary target is Android devices, with the Mamont banking trojan being a significant threat, rising from 10-12% of infections last year to 15% this year. Approximately 1.5 million Android devices in Russia are compromised by this malware. The rise in infections is attributed to the unavailability of apps in official stores, leading users to install APK files from third-party sources. Criminals exploit this behavior by distributing fake banking apps and updates. The growing interest in AI services has also contributed to the distribution of these trojans. Cybersecurity firm F6 has noted that campaigns using Mamont have been active since 2023.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 96d ago How this analysis works

Timeline

2023-01-01
Mamont trojan campaigns began
Active campaigns utilizing the Mamont banking trojan have been reported since 2023, targeting Android devices.
Meduza
2025-06-30
Malware infections reported at 70% increase
Mobile malware infections in Russia surged by 70% in the first half of 2026 compared to the same period in 2025, primarily affecting Android devices.
Meduza
2026-06-30
Mamont accounts for 15% of infections
The Mamont banking trojan has increased its share of infections from 10-12% last year to 15% in 2026.
Meduza

More articles in this cluster (2)

Following this threat?

Track Mamont in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed