AI-Themed Malware Puts SMBs at Greater Risk: Kaspersky

Small and medium-sized businesses (SMBs) are facing increasingly sophisticated cyber threats in the digital age, according to a recent research report by global cybersecurity company Kaspersky. Published on June 27 to mark International MSME Day, the report states that cybercriminals have increased the distribution of malware disguised as popular artificial intelligence (AI) tools by nearly fivefold since the beginning of 2026. Attackers are also increasingly targeting businesses through fake messaging and video conferencing applications.

According to the report, cybercriminals are primarily exploiting the names of widely used AI tools to spread Trojan malware. The most frequently impersonated AI platforms are:

ChatGPT (42 percent), Claude (24 percent), and DeepSeek (20 percent).

These fake applications are designed to deceive employees into installing malicious software. Once installed, the Trojan malware can steal sensitive information, secretly install additional malicious programs, or take complete control of an infected computer.

The report also notes a sharp rise in attacks using counterfeit versions of everyday communication platforms such as Telegram, WhatsApp, Zoom, and Microsoft Teams. Kaspersky said it successfully blocked approximately 415,000 such sophisticated cyberattacks during the first four months of 2026 alone, underscoring that SMBs remain one of the primary soft targets for cybercriminals.

Vasily Kolesnikov, a security expert at Kaspersky, said, "Cybercriminals are constantly developing new tactics and traps for their attacks. During the first four months of this year alone, we detected hundreds of attacks in which malware was distributed through fake versions of the rapidly growing AI tool 'OpenCl.' Today, employees in almost every organization use one or more AI tools for their work. Therefore, it is extremely important to verify website addresses and download links carefully before installing any software from the internet and to use reliable cybersecurity solutions."

Highlighting the challenges faced by smaller organizations, Rodion Pyanov, Product Manager for Kaspersky Small Office Security, said, "Cybercriminals primarily exploit human error and lack of awareness to develop new methods of fraud. That is why employees of organizations of all sizes should receive regular basic cybersecurity training. At the same time, considering the limited time and budgets of small businesses, they should choose security solutions that are lightweight, easy to use, and effective."

Kaspersky recommended that organizations strengthen their cybersecurity by adopting security solutions or antivirus software appropriate to their operational needs and budgets. Businesses without dedicated IT security teams may consider using trusted Managed Detection and Response (MDR) services for continuous threat monitoring and rapid incident response. The company also advised organizations to establish clear corporate policies for the use of third-party online services and AI tools, enforce strict access controls through two-factor authentication (2FA) for corporate accounts, and maintain regular backups of critical business data.

//DBTech/RI/EK/OR//