The number of Android and iPhone users hit by bank malware is skyrocketing as criminals increasingly shift to mobile devices.

In a new report, the cybersecurity firm Kaspersky says the number of smartphone users who encountered banking malware in 2024 soared 258% year-on-year.

“In 2024, the number of users who encountered mobile banking Trojans grew 3.6 times compared to 2023: from 69,200 to 247,949.”

The most active mobile malware targeting bank accounts was Mamont, commanding a market share of approximately 36.7% in 2024.

“This malware first appeared at the end of 2023 and is distributed mostly in Russia and the CIS. Its distribution schemes are ranging from ages-old “Is that you in the picture?” scams to complex social engineering plots with fake stores and delivery tracking apps.”

Countries in Europe and Asia were the most heavily impacted by mobile banking malware in the last year.

As for banking malware targeting PCs (personal computers), some of the most significantly impacted countries in 2024 were in Central Asia, Kaspersky says.

“As in 2023, the highest share of banking Trojans was registered in Afghanistan, where it rose from 6% to 9% in 2024. Turkmenistan was next (as in 2023), where the figure rose from 5.2% to 8.8%, and Tajikistan was in third place (again), where the figure rose from 3.7% to 6.2%.”

Going forward, Kaspersky’s senior web content analyst Olga Svistunova, says the level of sophistication that cybercriminals employ to reach users is only going to rise.

“Looking ahead, we expect financial phishing to become even more personalized and targeted, focusing on exploiting vulnerabilities in everyday digital habits, which will demand increased vigilance and thorough approaches to protection.”

Generated Image: Midjourney