Press Releases

The Last 18 Months of Mobile: Blacklisted Apps Rise, Antivirus Apps Prove More Harm Than Good

SAN FRANCISCO – June 20th, 2019 – RiskIQ, global leaders in attack surface management, today published its Mobile Threat Landscape Q1 2019 report, which monitors over 120 mobile app stores globally and scans nearly two billion resources looking for mobile apps in the wild.

For the second-straight quarter, RiskIQ added over two million new apps to their database, partially due to RiskIQ’s ever-expanding list of monitored mobile app stores, but also because of the continued explosive growth of the mobile app market.

Q1 2019 key findings include:

  • 2,263,268 new apps, 123,415, or nearly 6%, more than were observed in Q4 2018.
  • The number of blacklisted apps in the Google Play Store dropped for the second consecutive quarter and has fallen nearly 64% since Q3 2018.
  • Over Q4 2018 and Q1 2019, nearly 38,000 apps offered by Google were blacklisted, over 20,000 more than the next most blacklisted store,
  • 96% of apps in the and 30% of apps in ‘Vmallapps’ were blacklisted, and nearly half of all feral apps were found to be malicious.

This quarter’s report also includes a review of 2018’s mobile landscape. Findings highlight ways in which Magecart assaulted retailers via mobile, including British Airways, which involved the compromise of the company’s mobile app, as well as the trend of blacklisted apps masquerading as or associating themselves with Bitcoin exchanges, Bitcoin wallets, or just “cryptocurrency” in general.

The past 18 months have proven that even the savviest of users must be discerning and skeptical when downloading anything.

For specific metrics or to learn more, download the RiskIQ Mobile Threat Landscape Q1 2018 Report here:

About RiskIQ
RiskIQ is the leader in attack surface management, providing the most comprehensive discovery, intelligence, and mitigation of threats associated with an organization’s digital presence. With more than 75%of attacks originating outside the firewall, RiskIQ allows enterprises to gain unified insight and control over web, social and mobile exposures. Trusted by thousands of security analysts, security teams and CISO’s, RiskIQ’s platform combines advanced internet data reconnaissance and analytics to expedite investigations, understand digital attack surfaces, assess risk and take action to protect the business, brand, and customers. Based in San Francisco, the company is backed by Summit Partners, Battery Ventures, Georgian Partners and MassMutual Ventures.

Try RiskIQ Community Edition for free by visiting To learn more about RiskIQ, visit

© 2019 RiskIQ, Inc. All rights reserved. RiskIQ is a registered trademark of RiskIQ, Inc. in the United States and other countries. All other trademarks contained herein are property of their respective owners.


Holly Hitchcock
Front Lines Media