Critical Sectors Face Growing Risks as Android Malware and IoT Attacks Escalate

According to the Zscaler ThreatLabz 2025 Mobile, IoT, and OT Threat Report, cybercriminals are increasingly targeting Android mobile devices and Internet of Things (IoT) environments, with a notable rise in attacks against essential industries. 

The analysis shows a 67% year-over-year increase in Android malware incidents, highlighting the growing tactics threat actors use to exploit widely-used mobile platforms.   Meanwhile, sectors tied to critical infrastructure have experienced dramatic surges in targeted attacks — particularly the energy industry, which has seen activity climb by nearly fourfold compared to the previous year. 

Threat actors continue to use established malware families like Mirai, while newer variants such as Mozi are rising in prevalence. These tools often compromise devices and weave them into botnets that can be used for large-scale attacks.   The report also highlights emerging threats such as Android Void, a backdoor malware strain found on millions of Android TV boxes mainly in India and Brazil. 

Industries with heavy reliance on connected technologies — manufacturing, transportation, and others — remain common targets, collectively making up a significant share of IoT-related threats. 

To address the rapidly evolving threat landscape, Zscaler recommends adopting Zero Trust security practices and leveraging advanced, AI-powered threat detection tools. These methods help reduce vulnerabilities across mobile and IoT ecosystems and strengthen overall resilience against sophisticated attacks.