Doctor Web’s Q3 2025 review of virus activity on mobile devices

**Executive summary:** Doctor Web's Q3 2025 mobile threat review reports rising ad-displaying trojans (Android.MobiDash) as the most widespread threat, continued presence of banking trojans (Android.Banker, Android.BankBot, Android.SpyMax), numerous Joker and FakeApp trojans distributed via Google Play, discovery of a targeted Android.Backdoor.916.origin campaign against Russian businesses, and more than 1,459,000 combined installations of malicious apps; it details families, distribution vectors, riskware/modding tools, and links to indicators of compromise.