According to MegaFon data, the number of smartphones in Russia infected with malware increased by 34% in the summer of 2026 compared to the same period in 2025. The growth was most significant in August 2026, showing a 77% year-over-year increase. Most of these devices run on the Android operating system.
The surge in infections coincides with a decrease in blocked fraudulent calls. In June 2026, blocked calls fell by 31% year-over-year, followed by a 41% drop in July. By August 2026, the number of unblocked suspicious calls rose by 75% compared to August 2025. In September 2026, the volume of blocked calls decreased by 73% compared to September 2025.
Phishing activity remains high, with 30% of identified malicious sites linked to investments and cryptocurrencies. Another 21% are associated with social networks and messengers, while 9% host dangerous Android applications. Fraudsters are increasingly utilizing compromised accounts to conduct calls via messaging platforms.
Some devices arrive pre-infected from the factory. A global campaign identified in the fall of 2026 involves the distribution of budget smartphones with malware embedded in the firmware. These devices have been detected in 150 countries and are available for purchase on various Russian online marketplaces.
