Banking Trojans on Android

Dr.Web Security Space has reported a significant increase in malware activity on Android devices during the second quarter of 2025. Adware trojans, particularly from the Android.HiddenAds family, remain the most common threat, despite an 8.62% decrease in user encounters.

Banking Trojans on AndroidBanking Trojans on Android

Android.MobiDash adware trojans saw an 11.17% rise in attacks, embedding intrusive ad modules into apps. Meanwhile, Android.FakeApp programs, often linked to fraudulent online casinos, dropped by 25.17% in detection.

A notable concern is the 73.15% surge in Android.Banker banking trojan activity, posing a growing risk to users' financial security. In contrast, other banking trojan families like Android.BankBot and Android.SpyMax experienced declines of 37.19% and 19.14%, respectively.

Banking Trojans on AndroidBanking Trojans on Android

Cryptocurrency Theft and Spyware Threats April saw the emergence of sophisticated threats, including Android.Clipper.31, a trojan embedded in modified WhatsApp versions that intercepts messages to swap legitimate crypto wallet addresses with fraudulent ones. This malware also uploads images to remote servers to extract mnemonic phrases, endangering cryptocurrency holders.


"NPAV recommends home users and organizations to maintain strong, up-to-date cybersecurity measures. Install NPAV on your desktop, laptop, and mobile devices to ensure world-class protection against fraud, malware, and ransomware attacks.

Choose NPAV and be a part of our mission to make the digital world safer for everyone."