Over One Billion Android Users Exposed to Malware Threats

A recent report reveals that over one billion Android users are at risk due to outdated software, with more than 40% of active devices running versions that no longer receive critical security updates. As of December 2025, only 7.5% of devices had the latest operating system, Android 16, while Android 15 was present on 19.3%, Android 14 on approximately 17.9%, and Android 13 on 13.9%. This fragmentation leaves a significant portion of users, particularly in developing markets like Kenya, vulnerable to aggressive malware attacks, including "Spyloan" apps and SMS-based threats designed to harvest personal data and drain financial accounts.

One Billion Android Users Exposed to Critical Spyware ThreatHow millions of Android phone users are left vulnerable to malware and spyware threatsGoogle warns 40% of Android phones vulnerable to new malware attacks

The security gap is exacerbated by the slow rollout of updates across various manufacturers, which contrasts sharply with Apple's iOS, where updates are centrally managed. This delay means that many users remain on unsupported versions for extended periods. Mobile malware detections have surged by 151% in the past year, with spyware incidents increasing by 147%. Security experts warn that devices running outdated systems miss critical patches for vulnerabilities, making them prime targets for cybercriminals.

One Billion Android Users Exposed to Critical Spyware Threat

Google has acknowledged the severity of the situation, emphasizing that over 40% of Android phones are now at risk from new malware and spyware attacks. The company has highlighted the need for users to upgrade their devices, particularly those running Android 12 or earlier, as these phones will not receive essential security updates. Zak Doffman, a cybersecurity writer for Forbes, stated, “You should take this very seriously. Google has just confirmed that more than 40 percent of all Android phones are now at risk from new malware and spyware attacks.”

Google warns 40% of Android phones vulnerable to new malware attacksHow millions of Android phone users are left vulnerable to malware and spyware threatsOne Billion Android Users Exposed to Critical Spyware Threat

Critics argue that the Android ecosystem's open nature contributes significantly to the fragmentation issue, leaving users exposed. Security analysts have pointed out that while Google has introduced new security features in Android 15 and 16, these updates further isolate older devices, which may lose functionality with banking and enterprise applications. Experts recommend that users with unsupported devices consider purchasing new, mid-range phones that offer better security.

Google warns 40% of Android phones vulnerable to new malware attacks

While the data indicates that over 40% of Android devices are vulnerable, there are discrepancies in the exact figures regarding the percentage of devices running outdated versions. Some reports suggest that Android 11 accounts for around 13.7% of devices, while others provide slightly different estimates. Additionally, the exact impact of these vulnerabilities on user behavior and data security remains under-researched.

Google warns 40% of Android phones vulnerable to new malware attacks

As the adoption of Android 16 increases, particularly on Google Pixel and select Samsung models, the urgency for users on older versions to upgrade remains critical. Google continues to issue warnings about the risks associated with outdated systems, urging users to take proactive measures to protect their personal data and financial information.

Google warns 40% of Android phones vulnerable to new malware attacks