Kaspersky detects 4.7 million cyberattacks mimicking workplace tools

Kaspersky has detected 4.7 million attempted cyberattacks that disguise themselves as legitimate workplace tools. The analysis, covering the period from July 2025 to June 2026, shows that attackers are exploiting trusted business services to target employees as they return to more active working rhythms.

Zoom was the most frequently impersonated platform, accounting for 2,658,283 attempted attacks. Outlook followed with 1,546,122 detections. Other services used in these schemes included OneDrive, Microsoft Excel, and Microsoft Teams. The largest threat category identified was the ‘Downloader’, which accounts for 2,733,204 cases and is used to install additional software on targeted devices.