Older Android versions continue to draw more attention from attackers simply because they are installed on a vast number of devices worldwide. This assessment comes from a leading researcher at Kaspersky Lab who analyzed global device usage trends. The data show Android overtook iOS in popularity in the early 2010s and has remained the dominant mobile OS for years, with the largest user base around the latter part of the last decade. As the user pool grows, so does the potential pool of targets for cybercriminals, especially when devices do not receive regular updates.
Market realities also play a role. Budget smartphones and tablets frequently ship with older Android versions to meet price points and low hardware requirements. A corresponding effect is a sizable portion of the global user base continuing to operate devices that no longer receive the latest security updates. This creates ripe conditions for exploiting unpatched vulnerabilities, highlighting why legacy software continues to be a major concern for mobile security circles.
One clear differentiator between the two major platforms is the pace of software evolution. iOS tends to push updates to supported devices more rapidly and consistently, bringing not only new features but also security enhancements to a broad audience. In contrast, the Android ecosystem involves multiple manufacturers and carriers, which can slow timely updates for many devices. The net result is a higher percentage of older Android installations persisting over time, a situation that leaves more devices exposed to known weaknesses and zero day risks.
Security researchers also note that even when devices run older Android versions there is still attention from antivirus and mobile security vendors. These developers do not simply optimize for the freshest builds; they often extend protections to older iterations to help users reduce risk while they decide on upgrades. This layered approach helps maintain baseline defenses across a diverse landscape of devices and configurations.
There are additional security features gradually becoming available to Android users across versions. A battery health check function has been discussed in industry circles and is reportedly surfacing in the ecosystem, with the aim of giving users clearer insight into device performance and potential reliability issues. When such capabilities roll out, they can help users spot signs of degradation or impending hardware failure, which can in turn influence safer usage patterns and timely maintenance.
Industry reporting has also highlighted broader supply chain challenges affecting device innovation. In recent months there have been discussions about shortages in critical components for microchips, which can affect production cycles and update availability. While these macro factors do not touch every user directly, they shape the pace at which security patches and system updates reach the installed base.