From January to April 2026, Kaspersky security solutions detected more than 33,300 attacks on small and medium-sized enterprises (SMEs) where malicious software for PCs was disguised as popular AI services, a number that surged by almost five times compared to the same period in 2025. The most common lures involved malware posing as ChatGPT (42%), Claude (24%), and DeepSeek (20%). Among unique malicious files, Kaspersky experts observed mainly different Trojware, including those capable of downloading and running other malware. Additionally, from January to April, Kaspersky solutions blocked almost 415,000 attacks on SMEs where malware was disguised as messenger apps and video conferencing software like Telegram, WhatsApp, Zoom and Microsoft Teams, with the number changing marginally compared to the previous year. Kaspersky experts also noted hundreds of attacks where malware was disguised as OpenClaw, an AI tool gaining popularity in 2026. Vasily Kolesnikov, security expert at Kaspersky, advised caution when searching for software online and using robust security solutions.