Play store
The number of mobile threats detected in Bangladesh surged 108 per cent year-on-year to 1,859 in the first quarter of 2026, as cybercriminals increasingly targeted fewer users with more frequent and sophisticated attacks, according to global cybersecurity firm Kaspersky.
Across eight Asia-Pacific (APAC) countries, the average number of mobile threats detected per affected user rose 49 per cent during the period, from 4.9 to 7.3. However, the overall number of affected users declined, suggesting that attackers are concentrating on fewer targets while launching repeated attacks against them.
Bangladesh recorded a 108% increase in detected mobile threats, reaching 1,859 during the quarter.
Thailand saw detected threats more than double to 2,494. As the number of affected users declined, the average number of threats per user rose sharply from three to 11.9.
In Sri Lanka, detected threats increased 132% to 922, while the average per affected user climbed from 5.5 to 17.4. The Philippines recorded a 28% increase to 2,011 threats.
China detected 6,797 mobile threats, nearly double the number recorded during the same period in 2025. China and Bangladesh were the only two markets where both the number of detected threats and affected users increased.
India and Indonesia remained the largest markets in terms of total detections, with 18,187 and 15,163 mobile threats respectively.
The study also found a growing trend in mobile-based fraud. Cybercriminals are using fake offers, phishing pages, malicious advertisements and fraudulent surveys to steal users’ login credentials and personal information.
Phishing links are increasingly being distributed through messaging apps, social media, fake job offers, cryptocurrency giveaways and other digital campaigns. Attackers are also using compromised messaging accounts to send malicious links that appear to come from trusted contacts.
Login credentials for messaging platforms and government service portals have emerged as particularly valuable targets.
Mobile malware is also becoming more sophisticated. Some malicious content can operate with little or no active involvement from users, while multi-stage attacks are making threats increasingly difficult to detect.
In India, malware such as RewardSteal and Thamera has been active, while the use of artificial intelligence is making fraudulent messages more convincing. AI-generated messages, cloned voices and deepfake content are increasingly being used to deceive users.
Chun Hong Chee, head of consumer channel for APAC at Kaspersky, said mobile threats in the region are becoming increasingly sophisticated, with cybercriminals combining stealth techniques, persistent malware and AI-powered tactics.
As scams become more convincing and harder to detect, he stressed the need for security measures capable of identifying threats proactively, before users even realise they have been targeted.
Kaspersky advised users to verify the authenticity of apps and links before accessing them, remain cautious about rewards and attractive offers, regularly review app permissions, enable multi-factor authentication (MFA), keep software updated and use trusted mobile cybersecurity solutions.