Surge in Smartphone Malware Infections in Russia Driven by Trojans

Surge in Smartphone Malware Infections in Russia Driven by Trojans

First seen 30 Jun 2026, 22:35 UTC Meduza 100% similarity 51.9
Share:

Article Content

Browse articles
ThreatCluster

In the first half of 2026, smartphone malware infections in Russia increased by 70% compared to the same period in 2025, as reported by Kommersant. The primary target is Android devices, with the Mamont banking trojan being a significant threat, rising from 10-12% of infections last year to 15% this year. Approximately 1.5 million Android devices in Russia are compromised by this malware. The rise in infections is attributed to the unavailability of apps in official stores, leading users to install APK files from third-party sources. Criminals exploit this behavior by distributing fake banking apps and updates. The growing interest in AI services has also contributed to the distribution of these trojans. Cybersecurity firm F6 has noted that campaigns using Mamont have been active since 2023.

Key Points: • Smartphone malware infections in Russia rose 70% in early 2026 compared to 2025. • The Mamont banking trojan is responsible for 15% of all detected infections this year. • Approximately 1.5 million Android devices in Russia are compromised by malware.

ThreatCluster AI

Timeline

2023-01-01
Mamont trojan campaigns began
Active campaigns utilizing the Mamont banking trojan have been reported since 2023, targeting Android devices.
Meduza
2025-06-30
Malware infections reported at 70% increase
Mobile malware infections in Russia surged by 70% in the first half of 2026 compared to the same period in 2025, primarily affecting Android devices.
Meduza
2026-06-30
Mamont accounts for 15% of infections
The Mamont banking trojan has increased its share of infections from 10-12% last year to 15% in 2026.
Meduza

Community

Browse all →