A recent report by Zscaler ThreatLabz reveals that malicious apps on Google Play have been downloaded over 42 million times between June 2024 and May 2025. India was notably affected, with 26% of these mobile attacks occurring there. The report highlights a concerning uptick in mobile malware, urging vigilance in app sourcing.
Global Download Figures
The report identified 239 malicious apps on Google Play, primarily disguised as productivity tools. These apps collectively amassed over 42 million installs. Such figures reflect a 67% year-over-year increase in malware transactions fueled by spyware and banking malware. This suggests a significant headwind for Android users.
Regional and Sectoral Targets
India emerged as a primary target, accounting for 26% of global mobile attacks—a 38% increase from the previous year. In IoT attacks, the United States led with 54%, while Hong Kong followed with 15%. Reports also indicated that the energy sector experienced a 387% surge in attacks, emphasizing the need for improved cybersecurity measures across industries.
Shifts in Cybercrime Tactics
The report noted a strategic shift in cybercriminal activities from traditional card fraud to mobile payment exploitation. This change pressures financial stakeholders to strengthen defenses against evolving threats in mobile transactions.



