Beware of 2026 Cyber Attacks on MSMEs: AI-Disguised Malware Soars

The cyber threat landscape for the Micro, Small, and Medium Enterprises (MSMEs) sector has undergone a significant shift in early 2026. A recent report from Kaspersky reveals a worrying trend where cybercriminals are increasingly exploiting the popularity of artificial intelligence (AI) as bait to spread malicious software (malware). Throughout the period from January to April 2026, Kaspersky security solutions detected more than 33,300 attacks on MSMEs worldwide that used the guise of popular AI services. This figure represents a nearly fivefold surge compared to the same period in 2025. Southeast Asia became one of the most affected regions, with more than 1,800 attacks, marking an almost sevenfold increase year-on-year. Attackers are targeting business operators by disguising malware as legitimate productivity tools. In Southeast Asia, ChatGPT remains the most dominant lure, followed by other rising AI services such as DeepSeek and Claude. Beyond AI, communication and video conferencing applications remain a persistent classic threat. Kaspersky blocked nearly 415,000 attacks disguised as Telegram, WhatsApp, Zoom, and Microsoft Teams in the first four months of 2026. The most frequently encountered type of threat is Trojware. This malware works by masquerading as a harmless file to trick employees into installing it. Once it successfully infiltrates a system, Trojware can steal, delete, block, or copy sensitive company data. Vasily Kolesnikov, a security expert at Kaspersky, stressed that the emergence of new tools like OpenClaw, which gained popularity in 2026, is quickly adopted by cybercriminals as a new trap. ‘Employees must be extremely cautious when searching for software on the internet. Always check the spelling of websites and do not carelessly click on links in suspicious emails,’ he asserted. Adrian Hia, Managing Director for Asia Pacific at Kaspersky, highlighted that MSMEs are the backbone of the Southeast Asian economy, comprising more than 90% of businesses in the region. Resource limitations often cause them to be considered ‘easy targets’ by hackers. To mitigate these risks, Kaspersky recommends several strategic steps for business owners.