Kaspersky Warns of Rising Cyber Threats Disguised as Popular Online Tools

Strategic Insights -

Nearly 8,500 users from small and medium-sized businesses (SMBs) have faced cyberattacks this year, with "malicious or unwanted software" disguised as popular online productivity tools. Artificial intelligence (AI) and machine learning technologies have provided threat actors with sophisticated tools to perpetrate attacks. Kaspersky, a cybersecurity company, observed over 4,000 unique malicious and unwanted files disguised as popular apps in 2025, with an increase in threats mimicking AI services like ChatGPT and DeepSeek.

Key Takeaways:

  • Kaspersky observed nearly 8,500 users from SMBs facing cyberattacks in 2025, with "malicious or unwanted software" disguised as popular online productivity tools.
  • The most common lures for the cyberattacks included Zoom and Microsoft Office, with newer AI-based services such as ChatGPT and DeepSeek being increasingly exploited by attackers.
  • Kaspersky observed more than 4,000 unique malicious and unwanted files disguised as popular apps in 2025, with an increase in threats mimicking AI services like ChatGPT and DeepSeek.
  • The number of cyberthreats mimicking ChatGPT increased by 115 per cent in the first four months of 2025 compared to the same period last year, reaching 177 unique malicious and unwanted files.
  • Vasily Kolesnikov, security expert at Kaspersky, warned SMB employees to exercise caution when looking for software on the internet or when they encountered "too-good-to-be-true" subscription deals.
  • The firm also warned about the growing use of collaboration platform brands to trick users into downloading or launching malware.
  • Among the analysed sample, the highest number of files mimicked Zoom, accounting for nearly 41pc of all unique files detected.
  • Of Microsoft Office applications being mimicked, Outlook and PowerPoint each accounted for 16pc, Excel for nearly 12pc, while Word and Teams made up 9pc and 5pc, respectively.
  • Kaspersky continues to observe a wide range of phishing and scam schemes targeting SMBs, with attackers aiming to steal login credentials for various services or manipulate victims into sending them money through deceptive tactics.

Statistics:

  • Over 4,000 unique malicious and unwanted files disguised as popular apps were observed in 2025.
  • The number of cyberthreats mimicking ChatGPT increased by 115 per cent in the first four months of 2025 compared to the same period last year.
  • 177 unique malicious and unwanted files were detected mimicking ChatGPT in 2025.
  • 1,652 unique malicious and unwanted files were detected mimicking Zoom in 2025, with an increase of nearly 13pc.
  • 206 and 132 cases of "Microsoft Teams" and "Google Drive" were detected, respectively, with increases of 100pc and 12pc.
  • Nearly 41pc of all unique files detected mimicked Zoom.

Sources:

  • Kaspersky press release, Wednesday, 2025 (exact date not specified)
  • Kaspersky press release, April, 2025 (exact date not specified)