Testing Ground Labs — Independent Security Testing

Android Malware Detection Test
Consumer Products

Independent assessment of 9 consumer security solutions against 1,241 real-world Android malware samples.

Test Period December 2025
Report Version 1.0
Published 2026.02.10
9
Products Tested
1,241
Malware Samples
4
Perfect Scores

Detection Rate Overview

Avast
100.00%
Avira
100.00%
Kaspersky
100.00%
NortonLifeLock
100.00%
Total Defense
99.92% (1 missed)
ESET
99.84% (2 missed)
McAfee
99.68% (4 missed)
AhnLab
99.36% (8 missed)
Dr.Web
98.95% (13 missed)
98.5%99.0%99.5%100.0%
100% Detection < 100% Detection

Complete Test Results

VendorTotal SamplesMissedDetectedDetection RateFalse PositivesTotal Score
Avast124101241100.00%0100.00
Avira124101241100.00%0100.00
Kaspersky124101241100.00%0100.00
NortonLifeLock124101241100.00%0100.00
Total Defense12411124099.92%099.92
ESET12412123899.84%099.84
McAfee12414123799.68%099.68
AhnLab12418123399.36%099.36
Dr.Web124113122898.95%098.95

Monthly Award

Scoring Formula

Final Score = (Detection %) × 100 − 0.2 × FP

FP = number of false positive detections from 495 clean applications

Rating Scale

98.00 – 100.00★★★★★ 5-star
95.00 – 97.99★★★★ 4-star
90.00 – 94.99★★★ 3-star
★ ★ ★ ★ ★
5-Star Monthly Award — December 2025
All 9 tested products achieved 5-star ratings, with 4 achieving perfect 100% detection
Avast Avira Kaspersky NortonLifeLock Total Defense ESET McAfee AhnLab Dr.Web

Test Process

Test Device
Samsung S22
Operating System
Android 14
Sample Collection: A comprehensive set of 1,241 in-the-wild malware samples and 495 clean application installers sourced from threat intelligence feeds and Google Play Store.
Software Installation: Each security application was installed with default configuration settings.
Signature Updates: Prior to each scan, each application and its virus definitions were updated to the latest available versions.
Static Analysis (On-Demand Scan): A full file system scan was initiated. All detections and false positives were recorded.
Dynamic Analysis (Behavioral Test): Each undetected malicious sample was manually installed and executed. Behavioral detections were recorded.
False Positive Verification: Clean applications were scanned only (not installed or executed) to measure the false positive rate.

Software & Versions

VendorSoftwareVersion
AhnLabAhnLab V3 Mobile Security3.12.1.1 (Build 4262)
AvastAvast Mobile Security26.0.8.251105937
AviraAvira Antivirus Security for Android7.30.0 build No. 251028308
Dr.WebDr.Web Mobile Security Suite12.9.8(2)
ESETESET Mobile Securityv. 11.1.19.0-15
KasperskyKaspersky Premium for Android11.129.4.14969
McAfeeMcAfee Mobile Security9.10.0.277
NortonLifeLockNorton 360 (Norton Mobile Security)5.127.2.251217989
Total DefenseTotal Defense Mobile Security16.3.9