Mobile cyber threats across Asia-Pacific are becoming more concentrated and sophisticated, with cybercriminals targeting a smaller number of users more aggressively than before, according to new research from cybersecurity company Kaspersky. The company’s latest data shows that the average number of mobile threat detections per affected user across eight APAC markets increased 49% year-on-year in the first quarter of 2026, rising from 4.9 to 7.3 incidents.
While the overall number of users encountering mobile threats declined in several markets, attackers intensified their focus on individual victims. India recorded 18,187 mobile threat detections, making it one of the largest markets by attack volume alongside Indonesia, which reported 15,163 detections. China logged 6,797 detections, nearly double the number recorded during the same period last year.
The report highlights a rapidly evolving threat landscape driven by phishing campaigns, malicious applications, fake promotions, social engineering schemes, and AI-powered scams. Mobile users are increasingly being targeted through messaging apps, social media platforms, fraudulent job offers, cryptocurrency promotions, and fake surveys designed to steal credentials and personal information.
Particularly concerning is the growing role of artificial intelligence in cybercrime. Kaspersky’s research found that 66% of scam victims believe AI was used in attacks against them, including AI-generated messages, cloned voices, and deepfake images. These technologies are enabling cybercriminals to create highly convincing impersonation scams and execute fraud more quickly.
India continues to face threats from malware families such as the Rewardsteal Trojan, which disguises itself as reward applications, and the resurging Thamera Trojan, which hijacks devices to create fraudulent social media accounts.
Commenting on the findings, Choon Hong Chee, Head of Consumer Channel for APAC at Kaspersky, said attackers are increasingly combining persistent malware, sophisticated social engineering, and AI-driven deception to target mobile users. He emphasized the importance of proactive security measures as threats become harder for users to identify.
The findings underscore a growing reality for mobile-first economies such as India: cybersecurity awareness, multi-factor authentication, secure app usage, and mobile threat protection are becoming critical components of digital resilience.