Google Issues Urgent Warning: 40% of Android Phones Vulnerable to Malware

Google has confirmed that more than 40% of Android devices worldwide are exposed to new malware and spyware threats. The company’s latest Android distribution chart highlights slow adoption of newer versions, leaving millions of users without critical security protection.

Distribution Data Raises Alarms

According to Google’s report (shared via Forbes), Android 16 is installed on only 7.5% of phones, while Android 15 runs on 19.3% and Android 14 on 17.9%. Android 13, the minimum version still receiving full security updates, is present on just 13.9% of devices.

Older versions — Android 12 and below — are no longer supported, meaning over 40% of phones (more than a billion users) cannot receive security patches even when new malware is discovered.

Active Spyware Threats

Google warned that spyware attacks are already underway, making outdated phones especially dangerous. Devices running unsupported versions are completely unprotected against these threats. Although the data was collected in December, Google has only now released it, stressing the urgency of the situation.

What Users Must Do

Google advises users to update to Android 13 or newer immediately. If updates are unavailable, replacing the device is the safest option. The company emphasized that even a mid-range phone with updates is more secure than an outdated high-end model.

While Apple users are being pushed to update to iOS 26, most iPhones will soon receive updates. In contrast, many Android devices will never be updated again, making the risk far more severe.

Google’s final message is clear: old Android phones are unsafe to use today. Upgrading is the only way to stay protected.

FAQs

Q1. Why are 40% of Android phones at risk?
Because they run outdated versions (Android 12 or older) that no longer receive Google’s security updates.

Q2. What should Android users do now?
Update to Android 13 or newer, or replace the phone if updates are not available.