Number of virus-infected Android devices in Russia increased by 70% in six months

The number of Android devices in Russia infected with malware increased by 70% in the first half of 2026 compared to the same period in 2025. This is reported by CNews AI citing cybersecurity experts, who link the surge to users massively moving to installing applications bypassing official stores.

Why infections are increasing

According to the specialists interviewed by the publication, the key reason for the increase is that downloading APK files from third-party sources has become an everyday habit for Russian Android users. Some applications have been unavailable in official catalogs for several years, and smartphone owners have become accustomed to finding the software they need on third-party sites and unofficial application stores.

The official app store checks each application for malicious code before publication and scans already-installed applications in the background. When a user downloads an APK file directly from a website, this check drops out of the chain — and malware or spyware can end up on the device along with the needed program.

• In the first six months of 2026, the number of infected devices increased by 70% year-over-year
• This refers primarily to devices running the Android operating system
• The main reason for the increase is installation of APK files from third-party sources instead of official stores
• Experts link the trend to limited availability of applications in official catalogs in Russia

What risks come with installing APK from third parties

Files downloaded from an unverified store may contain malicious code disguised as a legitimate application — a banking client, messenger, or popular game. Modified or "cracked" versions of paid programs pose the greatest danger: cybercriminals often use such builds to embed trojans that steal passwords, confirmation codes, and access to banking applications.

Another typical scenario is spyware software that, after installation, gains access to SMS, contacts, and device geolocation and transmits this data to third parties without the phone owner's knowledge. Since such applications do not go through moderation by an official store, it is practically impossible to detect them before infection without antivirus software.

How to reduce infection risk

Cybersecurity experts, cited by CNews AI, give a standard set of recommendations for those who have to install APK files outside the official store. First of all, you should download the file only from the website of the application's developer, not from the first catalog you find in search results — it is on third-party aggregators that infected copies of popular software are most often posted.

Before installation, it is useful to check what permissions the application is requesting: if a conditional calculator or flashlight asks for access to SMS, contacts, or geolocation, this is a clear sign to be wary and refuse installation. Separately, specialists recommend keeping up-to-date antivirus software on your device, which can scan an APK file before it is installed and block malicious code in time.

Basic digital behavior is also important: do not click on links to install from unverified messages and advertising banners, regularly update your operating system and already-installed applications — updates often close exactly the vulnerabilities that malware authors for Android use to penetrate devices.

What this means

A 70% increase in infections in just six months shows that there is a direct price to switching to app installation bypassing official stores — risk to users' personal data and money. As long as app availability in Russia remains limited, and third-party APK sources remain the only alternative for many services, the number of infected Android devices, judging by the dynamics, will likely continue to grow. Experts recommend, if possible, checking the source of the file before installation and using antivirus applications if the APK is downloaded from somewhere other than the official store.