Ahead of International SMB Day on June 27, Kaspersky’s latest report highlights the growing cyber risks facing small and medium-sized businesses (SMBs). In early 2026, cybercriminals increasingly used fake AI tools as malware lures, with ChatGPT (42%), Claude (24%), and DeepSeek (20%) being the most impersonated. Most detected threats were Trojans capable of stealing data, downloading additional malware, or compromising systems. Meanwhile, fake communication apps such as Telegram, WhatsApp, Zoom, and Microsoft Teams remained the most common attack vector, with nearly 415,000 attacks blocked between January and April 2026, underscoring the persistent threat to SMBs, a press release said.

“The threat landscape is evolving with new lures constantly appearing. For example, for the first four months of this year our solutions for small and medium-sized businesses detected hundreds of attacks, in which malicious or unwanted software were disguised as OpenClaw – an AI tool that rapidly gains popularity in 2026. Corporate employees are increasingly using various AI services and other tools in their workflows, including those that are publicly available. Thus, to be on the safe side, SMB employees – as well as all users – should exercise caution when looking for software on the internet. Always check the correct spelling of the website and links in suspicious emails, and use robust security solutions”, says Vasily Kolesnikov, security expert at Kaspersky.

“As adversaries constantly refine their methods to exploit human error, the need for up-to-date security awareness training for businesses of all kinds and sizes is undeniable. However, the reality is that micro-organizations often struggle to allocate time and budget to regularly update their staff on the latest threats and malicious trends. We believe this issue can be largely addressed through solutions tailored for small businesses which deliver robust core protection while also providing accessible security education,” adds Rodion Pyanov, product manager, Kaspersky Small Office Security.  

Read the full report on the SMB threat landscape here: 

To strengthen cybersecurity, SMBs should adopt security solutions that match their size, budget, and operational needs while ensuring scalability. Businesses with limited IT resources can benefit from managed detection and response services that provide continuous threat monitoring and incident response. Organizations should also establish clear policies for using external services, enforce strict access controls for corporate resources, and regularly back up critical data to minimize disruption and ensure business continuity in the event of a cyberattack.