In 2024, 12 million cyberattacks were detected in Uzbekistan. By 2025, this number skyrocketed to 107 million — a staggering ninefold increase in just one year. The forecast for 2026 points to over 200 million attacks. Over the last five years, cybercriminals have drained 3.73 trillion soums (approximately $290 million) from Uzbek citizens, with 1.89 trillion soums lost in the first 11 months of 2025 alone. Notably, 98% of these cybercrimes are directly linked to bank cards. Against this backdrop, the local cybersecurity solution Cyber Kalkan has already amassed over 30,000 users on Google Play, serving as a clear indicator of a genuine market demand for localized security products in Uzbekistan.
Mobile fintech: dual waves of opportunity and risk
Mobile banking and fintech represent the fastest-growing sectors in Uzbekistan. The number of active bank cards has surpassed 55 million, up from 40 million just a year ago. Click boasts 20 million users, every commercial bank is developing its own super-app, and Uzum reaches millions through its digital ecosystem. This rapid evolution means that the entire financial life of millions of citizens is now packed into their smartphones. Salaries, grocery payments, loans, and peer-to-peer transfers are all managed via a single device.
While this offers unparalleled convenience for the user, it opens up a goldmine for cybercriminals, making every mobile app an entry point and every user a potential target. As the fintech sector expands, so does the attack surface. The metrics reflect this reality clearly: the volume of attacks has grown ninefold in a year, and the financial damages continue to scale annually.
The Cyber Kalkan App: end-user device protection
Traditional antivirus software can detect known malware, but modern mobile threats go far beyond standard viruses. Hidden screen recorders, malicious APK files, invisible overlay windows, and intercepted encrypted traffic usually bypass the radar of legacy antivirus programs. The Cyber Kalkan app is specifically designed to bridge this exact security gap through comprehensive endpoint protection.
The platform executes rapid scanning engineered to identify trojans, spyware, and classic viruses by verifying every installed application using its SHA-256 hash. It pays critical attention to sideloaded APKs from Telegram channels and unverified websites, which are currently the primary vector of infection in the region. The app inspects these files prior to installation to verify if they originate from official sources or contain hidden malicious code. Furthermore, suspicious links received via SMS or messaging apps are automatically analyzed, warning the user before they click.
Beyond file security, Cyber Kalkan actively monitors network traffic in real time, flagging high-risk VPN and Proxy connections that users are often blind to. It also assesses system integrity; if a device is rooted, it instantly alerts the user that malicious strains could gain deep system privileges. Finally, during sensitive operations like entering a PIN or viewing a one-time verification code, the app deploys screen capture protection to block background applications from recording the screen.
Cyber Kalkan SDK: B2B security for Banking and Fintech
Securing a consumer’s smartphone and securing the banking application itself are two fundamentally different challenges. The former relies on an antivirus app, whereas the latter requires an SDK — a dedicated security layer embedded directly into the application’s source code.
One of its primary defenses is mitigating fake or spoofed APKs. Fraudsters routinely clone banking apps, inject malicious scripts, and distribute them via Telegram channels under the guise of an official update. The SDK verifies that the app was deployed from official repositories like Google Play or the App Store, automatically blocking modified versions. It also features root and emulator detection to stop bad actors from reverse-engineering applications and manipulating app behavior on virtual environments.
To combat advanced financial fraud, the SDK detects overlay attacks and blocks screen recording during active financial transactions, ensuring that invisible, fake windows cannot harvest user inputs. It simultaneously runs background analysis to spot hidden keyloggers and spyware. When users connect to unsafe public Wi-Fi networks, the SDK strictly validates SSL/TLS certificates to identify Man-in-the-Middle (MITM) attacks and terminates insecure connections immediately.
Rather than treating all transactions equally, the SDK introduces a Device Risk Scoring system. By analyzing the device’s age, hardware metrics, and usage history, it outputs a Low, Medium, or High Risk Score, helping banks flag a suspicious transfer from a brand-new device. Thanks to real-time monitoring and callbacks, any emerging threat triggers an immediate API alert straight to the bank’s servers. Additionally, the SDK includes Anti-Fraud Call Protection tailored to the region’s most rampant social engineering scheme, where scammers call pretending to be bank security; the SDK detects active calls, automatically restricts sensitive in-app operations, and warns the target.
Global antivirus software like Kaspersky, ESET, or Norton are widely deployed in Uzbekistan. However, they lack specialized engineering tailored for mobile banking security and localized anti-fraud. Overlay attacks, localized fake APK distribution networks, and regional social engineering tactics modeled around Uzbek banks often slip completely beneath their radars.
Cyber Kalkan is fundamentally different because it is a Mobile Threat Defense (MTD) SDK that lives inside the client application, computes device risk scores in real time, and adapts natively to local fraud patterns. Previously, local banks relied on international SDK solutions which were prohibitively expensive, complex to integrate, and completely detached from the specific fraud ecosystem of Uzbekistan. In this landscape, localization is a core strategic competitive advantage.
The company utilizes a dual monetization strategy. For the consumer market (B2C), the app operates on a freemium model where core protection features are completely free, while advanced premium capabilities are locked behind a subscription. For banks and fintech enterprises (B2B), the SDK is provided via a licensing model where pricing scales based on annual fees, integration scope, and active user volume. The platform is currently running pilot integrations and partnership negotiations.
Legacy antivirus tools rely on rigid signature databases, meaning a new threat is invisible until the database updates. Moving forward, the engineering team is heavily focusing on AI-powered anomaly analysis to detect “Zero-day” threats by tracking user and device behavioral baselines. This technical leap is a deliberate strategic move to transition Cyber Kalkan from a domestic product into a consolidated, region-wide security hub for Central Asia.
While Cyber Kalkan is an intricately technical product, its significance stretches beyond technology. It stands as a benchmark for the maturity of the local market, proving that the Uzbek fintech ecosystem has scaled to a point where it officially requires its own specialized, localized security infrastructure. For end-users, it guarantees the safety of personal data and financial assets. For banks and fintech providers, it is an indispensable asset to retain customer trust and curb direct financial losses due to fraud. For both sides, it signals a qualitative leap forward for the entire digital ecosystem.
