Trojan Banker Malware and Preinstalled Threats on Smartphones Surge in 2025

In Pakistan and globally, mobile banking cyberattacks have seen a sharp increase, with Android devices being particularly targeted. According to a report by cybersecurity firm Kaspersky, the number of Trojan banker attacks on smartphones rose by 56% in 2025 compared to 2024. These types of malware are primarily designed to steal user credentials for online banking, e-payment services, and credit card systems. Cybercriminals often distribute these malicious tools through messaging apps and compromised websites. The report highlighted that new Trojan banker installation packages for Android reached 255,090, suggesting that these attacks are quite profitable for the attackers. Additionally, preinstalled backdoors like Triada and Keenadu are becoming more common, meaning that even brand-new devices may come infected. Experts warn that such malware, once integrated into the device firmware, is extremely difficult to remove and can give attackers full control over smartphones and tablets. To mitigate risks, users are advised to install apps only from official stores like Google Play or Apple App Store, carefully check app permissions, and keep their operating system and apps updated. These preventive steps are essential, but the report cautions that even official apps are not always entirely safe. Cybersecurity awareness remains crucial as mobile threats continue to evolve.