Kaspersky reports fourfold rise in AI‑disguised malware targeting European SMEs

Kaspersky’s security telemetry recorded a sharp increase in attacks on small and medium‑size enterprises (SMEs) in Europe during January‑April 2026. Over 800 targeted incidents were identified, and the company’s broader data show about 33,300 attacks in which malware was hidden behind the names of popular artificial‑intelligence services. The most frequently used disguises were ChatGPT (≈42 % of attacks), Claude (≈24 %) and DeepSeek (≈20 %).

In parallel, Kaspersky blocked nearly 415 000 attempts where malicious software pretended to be widely used messaging and video‑conference applications such as Telegram, WhatsApp, Zoom and Microsoft Teams. The company advises SME employees to verify web addresses, avoid clicking suspicious links, and employ robust security solutions when downloading software.

Vasily Kolesnikov, Kaspersky security expert, warned that the threat landscape continues to evolve with new AI‑related lures, citing the emerging OpenClaw tool as a recent example. He emphasized that careful user behavior remains essential to limit exposure to these sophisticated scams.