Fewer users targeted, but attacks are becoming more frequent
Mobile Threats Surge 108% in Bangladesh
- Mobile threat detections in Bangladesh rose 108 percent year-on-year
- Threats per affected user increased 49 percent across APAC markets
- AI and social engineering are intensifying mobile fraud risks
Dhaka, September 9, Wednesday: Mobile threat detections in Bangladesh rose 108 percent year-on-year to 1,859 in the first quarter of 2026, according to global cybersecurity company Kaspersky. Across eight Asia-Pacific (APAC) markets, the average number of threats detected per affected user increased 49 percent, even as the total number of affected users declined.
According to Kaspersky data, the average number of mobile threats detected per affected user across the eight APAC markets increased from 4.9 to 7.3 during the first quarter of 2026. The increase was recorded across all eight markets.
In Bangladesh, mobile threat detections rose 108 percent to 1,859.
Thailand recorded more than a twofold increase in detected threats, reaching 2,494. As the number of affected users declined, the average number of detected threats per user increased from 3 to 11.9.
Sri Lanka recorded a 132 percent increase in threat detections to 922. The average number of threats detected per affected user rose from 5.5 to 17.4.
The Philippines recorded a 28 percent increase to 2,011 detections. China recorded 6,797 mobile threats, almost twice the figure reported during the same period in 2025.
China and Bangladesh were the only two markets where both the number of detected threats and the number of affected users increased.
India and Indonesia remain the region’s largest markets by total detections, with 18,187 and 15,163 mobile threats detected respectively.
The research also found a growing trend in mobile-based fraud. Cybercriminals are using fake offers, phishing pages, malicious advertisements, fraudulent surveys and other social-engineering techniques to steal users’ login credentials and personal information.
Phishing links are being distributed through messaging apps, social media, fake job offers, cryptocurrency giveaways and various digital campaigns. Attackers are also using compromised messaging accounts to distribute malicious links that appear to have been sent by trusted contacts.
Login credentials for messaging platforms and government service portals have become particularly valuable targets for attackers.
Mobile malware is also becoming increasingly sophisticated. Some malicious content can operate with little or no active participation from users, while multi-stage attacks are making detection more difficult.
Malware such as RewardSteal and Thamera remains active in India. At the same time, the use of AI is making fraudulent messages more convincing. AI-generated messages, cloned voices and deepfake content are increasingly being used to deceive users.
Chun Hong Chee, head of Consumer Channel for APAC at Kaspersky, said, “Mobile threats in the APAC region are becoming increasingly sophisticated. Cybercriminals are combining stealthy attack techniques, persistent malware and AI-powered tactics. As fraud becomes more convincing and harder to detect, security solutions are needed that can proactively detect threats before users even realise they have been targeted.”
Kaspersky advised users to verify the authenticity of apps and links before accessing them, remain cautious about rewards or attractive offers, regularly review app permissions, enable multi-factor authentication (MFA), keep software updated and use trusted mobile cybersecurity solutions.
//DBTech/CPSS/SME/FOEH//
