AI and collaboration tools: how cyberattackers are targeting SMBs in 2025

Kaspersky’s 2025 SMB threat overview finds attackers increasingly disguising malware and PUAs as widely used services—especially Zoom and Microsoft Office tools—with rapid growth in AI-branded lures such as ChatGPT and DeepSeek; downloaders, Trojans, and adware dominate detections, while phishing and scams targeting SMBs (Google business account promos, bogus business-loan banks, DocuSign spoofs, and classic “Nigerian” schemes) remain prevalent. The report pairs brand-impersonation trends and social-engineering tactics with a practical action plan covering access control, backups, vetted software sourcing, employee training, MFA, and cloud/email security controls.