IT threat evolution in Q1 2026. Mobile statistics

Kaspersky’s Q1 2026 mobile threat report shows 2.676M prevented mobile attacks and the detection of 306,070 Android malware samples and >306k malicious installation packages (including 162,275 banking Trojan packages, a 50% quarter-on-quarter increase). Mamont variants dominated banking Trojans while pre-installed Triada variants rose sharply; adware and RiskTool apps remained large by attack volume. The report also links the Kimwolf botnet to the IPIDEA proxy network, notes SparkCat crypto stealer samples found in official app stores, and details technical TTPs such as an obfuscated Rust library decrypted via a custom Dalvik-like VM and iOS malware using Apple’s Vision OCR.