Moscow (GNP): AI Cyberattacks targeting small and medium-sized businesses have increased sharply in 2026, according to a new report released by global cybersecurity company Kaspersky. The report revealed that from January to April 2026, Kaspersky security solutions detected more than 33,300 attacks in which malicious or unwanted software was disguised as popular artificial intelligence services. Compared with the same period in 2025, the number of AI Cyberattacks increased nearly five times, highlighting the growing cyber risks facing businesses that increasingly rely on artificial intelligence tools in their daily operations.
The report, released ahead of International Small and Medium Sized Business Day on 27 June, examined how cybercriminals are exploiting the rising popularity of artificial intelligence platforms to target businesses. Kaspersky researchers found that attackers frequently disguise malware as trusted AI applications to trick users into downloading harmful files. During the first four months of 2026, the most common fake AI services used in AI Cyberattacks were ChatGPT, accounting for 42 percent of cases, followed by Claude with 24 percent and DeepSeek with 20 percent.
According to Kaspersky, most of the malicious files detected in these AI Cyberattacks were different forms of Trojware. Trojware is malicious software that appears to be a legitimate or harmless file but secretly performs harmful activities after installation. Security experts explained that these malicious programs can steal personal and business information, delete important files, modify or copy sensitive data, block access to systems, or install additional malware on infected devices. Such capabilities make Trojware one of the most dangerous cyber threats facing businesses today.
The report also found that cybercriminals continue to target businesses by disguising malware as popular communication and collaboration platforms. Between January and April 2026, Kaspersky blocked nearly 415,000 cyberattacks involving fake versions of Telegram, WhatsApp, Zoom, and Microsoft Teams. Although the number of these attacks remained relatively stable compared with the previous year, researchers noted that communication software continues to be one of the most commonly exploited methods used by cybercriminals to compromise business systems.
Vasily Kolesnikov, Security Expert at Kaspersky, said the cyber threat landscape continues to evolve as attackers constantly introduce new methods to deceive users. He noted that Kaspersky detected hundreds of attacks involving fake versions of OpenClaw, an artificial intelligence tool that has gained significant popularity during 2026. He advised businesses to remain cautious when downloading software from the internet, carefully verify website addresses, avoid suspicious links received through email, and use trusted cybersecurity solutions to reduce the risk of infection.
Rodion Pyanov, Product Manager for Kaspersky Small Office Security, emphasized that growing cyber threats require continuous employee awareness and education. He said many small businesses and micro organizations often lack the time and financial resources needed to provide regular cybersecurity training for their staff. According to him, security solutions designed specifically for smaller businesses should combine reliable protection with accessible security awareness programmes that help employees identify and avoid common cyber threats.
Kaspersky encouraged businesses to adopt cybersecurity solutions that match their size, budget, and operational requirements while remaining flexible enough to grow with the organization. The company recommended security platforms that provide real time protection, threat detection, and rapid incident response capabilities. For businesses without dedicated cybersecurity teams, Kaspersky also suggested using managed detection and response services that provide continuous monitoring, expert analysis, and professional support throughout the entire incident response process.
Also read: Children Embracing AI at More Than Triple the Rate of Adults, UNICEF Warns
The report further advised organizations to establish clear internal policies governing the use of external software, artificial intelligence services, and online resources. Businesses should define access controls for company email accounts, shared documents, and digital platforms while ensuring that only authorized personnel have access to sensitive information. Kaspersky also recommended performing regular backups of important business data to minimize operational disruption and data loss during cyber incidents.
Kaspersky concluded that AI Cyberattacks are expected to remain a growing challenge as artificial intelligence becomes more widely integrated into business operations worldwide. The company urged organizations to combine advanced cybersecurity technologies with employee awareness, responsible software usage, and proactive risk management to strengthen their overall cyber resilience. By implementing comprehensive security measures and maintaining vigilance against emerging threats, small and medium sized businesses can significantly reduce their exposure to increasingly sophisticated cyberattacks.
Sohail Majeed is a Special Correspondent at The Diplomatic Insight. He has twelve plus years of experience in journalism & reporting. He covers International Affairs, Diplomacy, UN, Sports, Climate Change, Economy, Technology, and Health.
