Kaspersky reports surge in AI‑masquerade malware attacks on SMBs

Kaspersky’s telemetry showed that between January and April 2026 more than 33,300 cyber‑attacks targeted small and medium‑sized businesses (SMBs). The attacks, which are almost five times higher than in the same period of 2025, primarily used malicious software disguised as popular artificial‑intelligence services – ChatGPT accounted for 42 %, Claude 24 % and DeepSeek 20 % of the lures. Trojan‑type malware concealed as AI tools can steal, delete, block or install additional payloads on compromised devices.

At the same time, Kaspersky blocked roughly 415,000 attempts that masqueraded as messages or files sent via messenger and video‑conferencing platforms such as Telegram, WhatsApp, Zoom and Microsoft Teams. The firm advises SMBs to deploy comprehensive security solutions, verify the authenticity of AI‑related applications, and run regular security‑awareness training. In Greece, victims of messaging‑app scams reported an average loss of $609, with only one‑quarter reporting the fraud to authorities.

"The threat landscape is evolving with new lures constantly appearing," said Kaspersky security expert Vasily Kolesnikov. "Robust security solutions and up‑to‑date staff training are essential to protect small businesses against these sophisticated attacks."