Number of Malware-Infected Android Devices in Russia Rises 70% in Six Months

The number of Android devices in Russia infected with malware rose 70% in the first half of 2026 compared with the same period in 2025. CNews AI reported the figure, citing cybersecurity experts who link the spike to users en masse installing apps outside official stores.

Why infections are rising

The specialists the publication spoke to say the key reason for the growth is that downloading APK files from third-party sources has become an everyday habit for Russian Android users. Some apps have been unavailable in official catalogs for several years, and smartphone owners have grown used to looking for the software they need on third-party websites and in unofficial app stores.

An official app store checks every program for malicious code before publication and scans already installed apps in the background. When a user downloads an APK file directly from a website, that check drops out of the chain, and a trojan or spyware can reach the device along with the program the user wanted.

• In the first six months of 2026, the number of infected devices rose 70% year over year
• The figures concern primarily devices running the Android operating system
• The main reason for the growth is installing APK files from third-party sources instead of official stores
• Experts link the trend to the limited availability of apps in official catalogs in Russia

What risks does installing APKs from outside sources carry?

Files downloaded from anywhere other than a trusted store can contain malicious code disguised as a legitimate app, such as a banking client, a messenger or a popular game. Modified or «cracked» versions of paid programs pose the greatest danger. Attackers often use exactly these builds to embed a trojan that steals passwords, verification codes and access to banking apps.

Another typical scenario is spyware. Once installed, it gains access to the device's SMS messages, contacts and geolocation, and passes that data to third parties without the phone owner's knowledge. Because such apps do not go through an official store's moderation, it is practically impossible to detect them before infection without an antivirus.

How to reduce the risk of infection

The cybersecurity experts cited by CNews AI offer a standard set of recommendations for people who have to install APK files outside the official store. First, download the file only from the app developer's own website, not from the first catalog that turns up in search results. Third-party aggregators are where infected copies of popular software are most often posted.

Before installing, it helps to check the permissions the app requests. If, say, a calculator or flashlight app asks for access to SMS, contacts or geolocation, that is a clear reason to be wary and cancel the installation. The specialists also recommend keeping an up-to-date antivirus app on the device, one that can scan an APK file before it is installed and block malicious code in time.

Basic digital hygiene matters too: do not follow installation links from unverified messages and ad banners, and regularly update the operating system and installed apps. Updates often close exactly the vulnerabilities that Android malware authors exploit.

What this means

A 70% rise in infections in just six months shows that moving to installing apps outside official stores has a direct price: risk to users' personal data and money. As long as app availability in Russia remains limited and third-party APK sources remain effectively the only alternative for many services, the number of infected Android devices will, judging by the trend, keep growing. Experts advise checking the source of a file before installing it where possible, and using antivirus apps if an APK is downloaded from anywhere other than the official store.