According to a report by Zscaler, India has topped the list for mobile malware attacks globally, surpassing the United States and Canada, with a step-up from its previous third-place ranking. With nearly half of mobile attacks being trojans (malware that tricks users into downloading and running malicious software), the financial sector is particularly vulnerable. The report revealed a 29 per cent increase in banking malware attacks and a 111 per cent rise in mobile spyware attacks.

Further, phishing attempts targeting mobile customers of major Indian banks have increased. These attacks deceive mobile users into disclosing critical bank information by using phoney banking websites that closely mimic the real ones. Previously, similar tactics were used to spread Android-based phishing malware through fake card update sites, leading to widespread financial fraud.

As per the report, the Indian postal service has also become a target for attackers. Using SMS messages, they direct mobile users to phishing sites that prompt them to input credit card details. These fraudulent schemes often exploit common scenarios like missing packages and incomplete delivery addresses, capitalising on the urgency created by such messages.

The report also indicated a concerning global trend, with over 200 malicious applications discovered on Google Play Store and a 45 per cent year-over-year increase in internet of thing (IoT) malware transactions, underscoring the pervasive nature of cyber threats today.

On a positive note, India has improved its ranking as a malware origin point, moving from fifth to seventh place in the APAC region.

The report analysed a dataset comprising over 20 billion threat-related mobile transactions and associated cyber threats, between June 2023 to May 2024.