Fake AI Tools Are Now a Top Cyberthreat Targeting Small Businesses in 2026

Small businesses are now squarely in the crosshairs of AI-themed cyberattacks -- and the numbers from Kaspersky's 2026 SMB threat report are stark. From January to April 2026, Kaspersky solutions detected over 33,300 attacks on SMBs disguised as popular AI tools -- nearly five times more than the same period in 2025.

Key Takeaways

• Fake AI tools are now the #1 growing attack vector for SMBs. Attacks mimicking AI platforms surpassed fake office and collaboration tools in 2026. Over 1,100 unique malware samples masqueraded as five popular AI services, a 21% rise year-over-year. Claude and OpenClaw (formerly ClawdBot) were among the most-used AI lures.
• Phishing and scams follow the hype. Fraudsters built fake AI subscription sites for "contractor" tools, cloned bank pages, and ran two-stage credential-theft schemes via fake Zoom meeting invitations -- all aimed at small and medium businesses.
• SMBs dominate dark web initial access listings. Posts offering access to allegedly compromised businesses skewed heavily toward SMBs for the second consecutive year. Trusted relationship attacks -- where SMBs serve as entry points into larger enterprises -- grew from 12.7% to 15.5% of initial attack vectors between 2024 and 2025.

Kaspersky recommends that SMBs enforce strict access controls, conduct regular employee security training, and download AI tools only from verified official sources.

Read the full article on Securelist