CyberGlossary

Malware

Mobile Malware

Also known as: Smartphone malware, Android/iOS malware

Definition

Malicious software that targets smartphones and tablets to steal data, intercept communications, mine cryptocurrency, or perform financial fraud.

Mobile malware refers to malicious applications and exploits designed for iOS and Android devices. Common categories include banking trojans that overlay legitimate apps, spyware that exfiltrates messages and location, premium-SMS fraud, click bots, mobile RATs, and rooting/jailbreak rootkits. Distribution channels include rogue third-party app stores, sideloaded APKs, malicious advertising, smishing links, and supply-chain compromise of legitimate apps. Defences include keeping the OS updated, installing apps only from official stores, reviewing app permissions and accessibility-service abuse, using Mobile Threat Defence (MTD) or enterprise MDM, and watching for unusual battery, data, and SMS activity.

Examples

  • Cerberus and Anubis Android banking trojans abusing accessibility services.
  • Pegasus spyware deployed via zero-click iMessage exploits.

Related terms