The report, which is primarily based on findings from Zimperium’s zlabs research team, indicates that AI is fundamentally reshaping the mobile threat landscape, enabling more convincing and scalable mobile phishing campaigns, increasing malware, exploding Shadow AI risks, and a new generation of vulnerable, vibe coded mobile applications.

According to Zimperium, while organisations have invested heavily in securing traditional endpoints, cloud infrastructure, and networks, mobile remains an afterthought for many organisations. Consequently, with the help of AI, mobile has become the most vulnerable attack surface in the enterprise.

"AI has changed the game on securing mobile. It's making mobile attacks easier, scalable, and much more sophisticated. It’s forcing organisations to rethink how they ensure trust and guard against fraud on the devices and mobile apps that their employees and customers rely on every day," said Shridhar Mittal, CEO of Zimperium. "Whether in the private sector or government, mobile devices and apps have become central to driving business, building customer trust, and enabling mission-critical operations. But for the most part, mobile continues to be the least protected surface in the enterprise. In the meantime, AI has lowered the bar for exploiting both devices and the mobile apps themselves; consequently, the sophistication and volume of threats that were expected five years from now are here today. Organisations and their shareholders are facing one of the greatest cyber security risks we’ve seen in recent years and most have no contingency.”

According to some sources AI-assisted phishing campaigns have reportedly grown at a rate of more than 1200%. Zimperium’s data shows that phishing events detected on employee mobile devices grew 380% since January 2025, and the number of devices where employees clicked a malicious link grew 110% in 2025 over the previous year. The report also found that AI is used to generate content estimated to be 4.5x more convincing than anything human-written while almost 86% of phishing attacks now contain AI-generated elements.

These findings highlight how generative AI is enabling attackers to launch increasingly personalised and scalable phishing campaigns.

The report's findings reinforce that AI is fundamentally reshaping the enterprise mobile threat landscape, requiring organisations to rethink how they secure mobile devices, applications, and the sensitive data they access. As attackers continue to innovate faster with AI, enterprises need a mobile security strategy purpose-built for today's rapidly evolving threats.