Significant Rise in Mobile and IoT Malware Risks
The cybersecurity landscape is rapidly evolving, with Zscaler, Inc. (NASDAQ: ZS) recently releasing the Zscaler ThreatLabz 2025 Mobile, IoT, and OT Threat Report. This report sheds light on troubling trends, including a staggering 67% increase in Android malware incidents and a surge in attacks against critical sectors, particularly in the energy industry.
Key Findings from the Threat Report
Among the standout results from the report is the astounding 387% rise in attacks targeting critical infrastructure in the energy sector. This alarming figure exemplifies how vulnerable essential services are becoming in the face of increasing cyber threats. Furthermore, the report notes that India remains atop the heap concerning mobile attack targeting, accounting for 26% of all incidents. Meanwhile, the United States continues to lead in IoT assaults, with 54% of reported attacks occurring on its soil.
Mobile Application Threat Landscape
Zscaler's analysis highlights a concerning trend in the Android app ecosystem, revealing that hundreds of malicious applications are thriving on platforms like the Google Play Store. These apps, which masquerade as productivity tools, have been collectively downloaded over 40 million times. This year's report indicates that there has been a remarkable year-over-year increase of 67% in transactions involving Android malware, emphasizing the ongoing risks posed by spyware and banking trojans.
The research team pinpointed 239 malicious apps categorized under “Tools,” cleverly disguising themselves to exploit user trust, especially in environments dominated by hybrid work where mobile functionality is crucial.
Cyber Threats in Manufacturing and IoT
Manufacturing remains a prime target for these cybercriminals, with substantial threats also directed at the energy sector. The report outlines that both Manufacturing and Transportation industries accounted for over 40% of IoT malware attacks this year. As a shift in tactics, manufacturers are now facing stiff competition from other industries that also rely heavily on IoT infrastructure, suggesting a new wave in threat actor strategies.
The Dominance of Major Malware Families
Among the various types of IoT malware, the Mirai family is notably prominent, constituting roughly 40% of blocked transactions. Following closely is Mozi, which has now overtaken Gafgyt in active threats, representing a significant portion of the malicious payloads targeting IoT environments. Together, these three families—Mirai, Mozi, and Gafgyt—account for approximately 75% of attacks in IoT spaces.
Geographic Concentration of Attacks
The report has also highlighted significant geographic trends in malware attacks. India tops the list, accounting for 26% of all mobile malware traffic, while the US and Canada follow with 15% and 14%, respectively. Notably, the US stands out as a focal point for IoT attacks, contributing over half of the global IoT malware incidents.
Defensive Strategies Against Escalating Threats
Deepen Desai, EVP and Chief Security Officer at Zscaler, articulated the necessity for businesses to adopt a comprehensive security strategy in light of these alarming trends. He emphasizes that a Zero Trust framework combined with advanced AI-driven threat detection is essential for mitigating risks, reducing potential attack surfaces, and warding off evolving cyber threats.
Zscaler's Zero Trust Branch provides a robust security solution tailored to protect mobile, IoT, and operational technology environments. This protection is crucial for organizations facing the complexities of modern cyber threats.
Innovative Protection Solutions Offered
To address the challenges posed by billions of interconnected IoT devices, Zscaler offers Cellular, a solution designed for secure and effective connectivity exclusively for devices relying on cellular networks. This platform, which operates on the Zscaler Zero Trust Exchange™ framework, aims to combat security vulnerabilities effectively, providing organizations with granular control and centralized visibility over their cellular traffic.
Conclusion and Recommendations for Enterprises
The findings presented in the 2025 Mobile, IoT, and OT Threat Report underscore the critical need for organizations to bolster their cybersecurity measures. By remaining vigilant and adaptable to the evolving threat landscape, businesses can safeguard their operations against emerging mobile and IoT attacks.
Frequently Asked Questions
What key findings were highlighted in the Zscaler report?
The report identified a 67% increase in Android malware incidents, with manufacturing and energy sectors facing significant threats.
Why is India a significant focus for mobile attacks?
India accounts for 26% of all mobile attacks, indicating a concentrated threat environment that cybercriminals exploit.
What measures can organizations take against rising threats?
Implementing a Zero Trust architecture and AI-driven threat detection is essential for organizations to protect against evolving cyber threats.
What types of malware are most concerning in IoT?
Mirai, Mozi, and Gafgyt malware families are currently the most prevalent threats, collectively responsible for 75% of IoT attacks.
How does Zscaler protect against these cyber threats?
Zscaler utilizes a cloud-native platform that enables continuous security verification and policy enforcement to protect mobile and IoT devices effectively.
