India has emerged as the most targeted country for mobile malware attacks, according to Zscaler’s ThreatLabz 2025 Mobile, IoT, and OT Threat Report. The findings point to a sharp rise in cyber threats targeting smartphones, connected devices and critical infrastructure in fast-digitising markets such as India. The US and Canada ranked as the 2 most targeted countries after India.
The report shows that India alone accounts for 26% of all mobile malware attacks worldwide. The US follows with 15%, while Canada accounts for 14%. Zscaler noted that the surge in attacks is closely linked to the growing use of mobile apps, digital payments and connected devices in everyday life.
One of the key concerns highlighted is the spread of malicious apps through trusted app stores. Zscaler researchers identified 239 harmful Android apps on the Google Play Store. These apps were downloaded more than 42 million times. Many were disguised as productivity or workflow tools, taking advantage of user trust in hybrid and remote work setups where smartphones are used for both personal and professional purposes.
In India, retail and wholesale businesses faced the highest number of attacks, accounting for 38% of incidents. Hospitality, restaurants and leisure followed at 31%. Manufacturing and energy-related sectors were also targeted due to their growing dependence on connected systems and IoT devices.
The report also highlighted IoT-related threats. The US emerged as the global hotspot for IoT malware activity, accounting for 54% of total cases. India ranked 4 with 5%. In India, backdoor and botnet-style malware dominated, with a single malware family responsible for most detections. New threats include malware infecting millions of Android TV boxes and a remote access tool aimed at job seekers in the oil and gas sector.
Suvabrata Sinha, CISO in Residence at Zscaler, stressed the importance of adopting a Zero Trust security model that continuously verifies every user and device. Deepen Desai, EVP and Chief Security Officer at Zscaler, also highlighted the need for stronger AI-driven security systems to counter the rapid rise in mobile and IoT attacks.
The report makes it clear that as India’s digital ecosystem expands, its exposure to cyber threats continues to grow.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream formerly known as CIO News LinkedIn Account | The Mainstream formerly known as CIO News Facebook | The Mainstream formerly known as CIO News Youtube | The Mainstream formerly known as CIO News Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.
