IT threat evolution in Q3 2025. Mobile statistics

**Executive summary:** Kaspersky's Q3 2025 mobile-threat review reports an updated KSN-based methodology and documents substantial mobile malicious activity: 47 million prevented attacks overall, 197,738 malicious Android installation packages detected (including 52,723 mobile banking Trojan packages and 1,564 ransomware packages). The report details dominant families (Triada, Mamont, Coper), region-specific concentrations (Turkey, India, Iran, Germany), notable technical findings such as a preinstalled BADBOX backdoor loading a malicious native library and a Trojan-Clicker abusing invisible WebView for ad fraud, and a surge in Rkor ransomware activity in Germany.