In Russia, the number of users with viruses in the phone increased by a third
The number of users in Russia, on whose smartphones malware was detected, in the summer of 2026 increased by 34% compared to the same period last year, RBC reported in MegaFon, citing data from the monitoring system of cyber threats.

The number of users in Russia, on whose smartphones malware was detected, in the summer of 2026 increased by 34% compared to the same period last year, RBC reported in MegaFon, citing data from the monitoring system of cyber threats.
The most notable increase in the number of users with infected smartphones came in August - by 77% compared to the same month last year. We are talking primarily about Trojans for Android devices that can install applications without the knowledge of the owner, intercept notifications, get remote access to a smartphone and steal personal data.
At the same time, the number of blocked suspicious calls decreased compared to last year. In June, their number decreased by 31%, in July - by 41%, in August - by 75%. In September, the number of blocked suspicious calls decreased by another 3% compared to August and by 73% compared to September last year.
The company linked the reduction in the number of suspicious calls with measures to combat telephone fraud by the state and business.
Fraudsters also used “stolen” user accounts in messengers to make calls. To gain access to them, attackers used social engineering methods, malware or offered owners to rent out accounts for money.
The number of phishing resources remained at a high level. Among the identified sites, 30% were related to investments and cryptocurrencies, 21% were related to social networks and instant messengers. Another 9% came from sites with potentially malicious APK files, 8% from payment gateways and 7% from sites with fake news. Individual sites could fall into several categories at once.
Director of the Department of “MegaFon” for the prevention of fraud and loss of income Sergey Khrenov reported cases when fraudulent calls were accompanied by the installation of malicious software. Under the guise of legal applications, attackers persuaded users to install spy Trojans to control the victim and change the tactics of deception.
Earlier, the interior Ministry called signs of infection of the smartphone malicious software. Among them are slowing down, freezing, spontaneous reboots, the appearance of unknown windows and performing actions without the user’s permission. The department warned that viruses can give fraudsters access to personal data and a mobile bank, and recommended not to enter bank details on an infected smartphone.



