239 malicious applications were identified on the Google Play Store, collectively downloaded over 42 million times.

Play dropped to third place of most active threat groups in June 2025 with 29 attacks.

Play was the fourth most active ransomware group, with 43 attacks in February 2025.

Play Ransomware conducted an average of 30 attacks per month, peaking in October 2024 with at least 52 attacks10. Approximately 89.9 percent of Play Ransomware's victims were based in North America10. 24.7% of Play Ransomware's victims were in the manufacturing industry and 17.5% were in the construction industry.