Your Apps in the Wild: Highlights from the February 2026 Global Threat Insights

We just published the February 2026 Monthly Global Threat Insights report, and a few numbers jumped out that are worth sharing.

Android apps continue to see more threat activity than iOS. Nearly 64% of Android application instances experienced some form of tampering, compared to 44% on iOS. That gap isn't new, but the scale of it reinforces why protection coverage across both platforms matters--and why your guard configuration choices on Android deserve extra scrutiny.

Trojans dominate the malicious package landscape. At 42.9% of detected malicious packages, Trojans remain the top category by a wide margin, followed by PUAs (20.9%) and Adware (17.4%). The Trojan prevalence points to attackers specifically targeting financial and personal data--exactly the kind of assets our customers are protecting.

OS version adoption is concentrating fast. Android 15 and 16 now account for over half of all instances, and on iOS, version 26 commands nearly 80% of the install base. If you're making decisions about minimum supported OS versions, this data can help you draw the line with confidence.

Want to see numbers like these--but focused on your apps?

If you're an App Aware customer, you already receive a personalized version of this report every month, scoped to your specific applications and threat landscape. If you're not on App Aware yet, reach out to your account team to get set up. It's one of the best ways to turn our threat telemetry into actionable insight for your security and product teams.