Zimperium's research team studied 34 distinct malware families targeting 1200 apps across 90 countries. The pattern behind all of them isn't a new exploit or a clever trick. It's a set of assumptions App Dev teams are making about their own security controls, assumptions that no longer hold. And the same AI tools helping you ship faster are helping attackers break your app faster too. MFA. Obfuscation. API security. Encryption. These are the controls most teams treat as standard practice, and they're the same ones this research found being bypassed across the board. This talk breaks down what these malware capabilities target, why each assumption fails, and how AI is speeding up the attacker's side of the equation. You'll leave with a clear picture of how malware authors are using the mobile device itself and malicious apps to bypass the defenses you've already built in, and which of your standard controls need to be rethought rather than just checked off.