Google warns 40% of Android phones are at risk from new malware — what you must do now

Google has confirmed that more than 40% of all Android phones are at risk from new malware and spyware attacks. This warning was shared after Forbes posted on X, saying Google confirmed the large-scale risk to Android users worldwide. Google said users with affected phones must act now because these devices are no longer getting important security protection.

Google released a new Android distribution chart, and the numbers are worrying. At the time the data was collected in December, Android 16 was on only 7.5% of phones. Android 15 was running on 19.3% of phones, showing slow updates across devices, as reported by Forbes. Android 14 was on 17.9% of phones, still not enough to keep most users safe. Android 13 was installed on 13.9% of phones, which is the minimum version still getting full security fixes.

Old Android versions not safe

Google clearly stated that Android 12 and all older versions are no longer supported with critical security updates. Because of this, only about 58% of Android phones are protected, while over 40% are not. This means more than one billion Android users are exposed to new cyber attacks with no way to fix their phones. These unsafe phones cannot receive security patches, even if new malware is found.
Google warned that new spyware attacks are already happening, making the risk even more serious. Google said these outdated phones are completely unprotected against these new spyware threats. Even though the data was collected in December, Google has just released it now, making the warning urgent, as noted by Forbes. Google urged all users with old Android phones to take this threat seriously and not ignore it.

What users must do now

Google advised that if your phone cannot update to Android 13 or newer, you should think about replacing it. Google said buying a new mid-range phone with updates is safer than using an old high-end phone with no support. The report also compared the situation to Apple, where iPhone users are being pushed to update to iOS 26. However, Apple’s issue is temporary, because most iPhones will update soon.

Google’s Android problem is more serious because many phones will never get updates again. Google ended the warning by saying over a billion users are still at risk today, not in the future. The clear message from Google is simple: old Android phones are dangerous to use now, as cited by Forbes. Users are strongly advised to upgrade their phone as soon as possible to stay safe from malware and spyware.

FAQs

Q1. Why are 40% of Android phones at risk?Because many phones use old Android versions that no longer get security updates from Google.

Q2. What should Android users do now?

Users should update to Android 13 or newer, or buy a new phone if updates are not available.