Doctor Web’s Q2 2026 review of virus activity on mobile devices

Dr.Web’s Q2 2026 mobile threat review reports a continued high prevalence of Android malware: banking trojans (Android.Banker, especially Mamont) remain the most widespread and steal SMS/credentials, adware and fake-AV apps are common, and threat actors increasingly use modding/obfuscation tools (NP Manager, LuckyPatcher) to evade detection; new threats found on Google Play include subscription/Joker trojans with millions of installs, and the Android.MagicAd.1 strain capable of bypassing OS restrictions to show background ads.