The computer viruses where it all began three decades ago are now only a small share of threats. Most modern attacks target not the computer but the person: the aim is to get the user to hand over a password, approve a payment or install a fake app themselves. Below is what is really happening today, based on the latest Kaspersky threat research data.
What threatens home users
Scams have become an everyday occurrence. In a Kaspersky survey conducted in March 2026 (7,200 people in 18 countries), the share who encountered a scam attempt within a year was 56 % internet users, and 45 % were actually harmed – their devices, accounts or data were compromised. In the first quarter of 2026 alone, more than 140 million phishing attempts.
The main route in is the browser. In Q2 2026, around 400 million attacks originating from online resources, and detected 52 million unique malicious links. At least one such attack was experienced by 4,54 % of all users’ computers worldwide.
Ransomware. In the second quarter of 2026 alone, there appeared 2 538 new variants, and more than 71 000 users – with the peak in April (31,206). A single group, “Qilin”, claimed responsibility for almost one in six publicly reported attacks (15%).
Covert mining using your computer. Cryptominers detected in the second quarter of 2026: 6 067 new variants – almost twice as many as in the previous quarter. More than 213 000 users. The signs are simple: the computer gets hot, the fan whirs and everything slows down.
Your phone is the main target. In Q2 2026, more than 1.99 million attacks on mobile devices, and detected over 304 000 malicious installation packages, including 93 574 banking Trojans. It was they that made up 30,77 % of all detected malware – the largest share.
Scams in the name of AI. Detected in January–April 2026: 33 352 attacks disguised as popular AI services – almost five times more than in the same period of 2025. People look for a trendy tool, download a “free version” and get malware along with it.
The threats facing small businesses
- January–April 2026 saw 414 736 attacks disguised as chat and video conferencing apps, and another 24 000 – with office applications.
- Scammers pose as OneDrive file notifications, Facebook warnings about rule violations or official letters from authorities – all to get an employee to enter their login details.
- Access to corporate networks is sold on the dark web: more than half of all such offers concern small and medium-sized businesses. In Europe their number fell by 34 % over the year, but in the Middle East it rose by 53 %.
- In 2025, more than 144 million malicious e-mail attachments – 15% more than in 2024.
Data: Kaspersky and Securelist 2026 reports. Updated 1 September 2026.
Terms worth knowing
Ransomware – encrypts files and demands money for decrypting them. Paying comes with no guarantees; the only reliable protection is a working backup and an attack stopped in time.
Information stealer (infostealer) – silently collects passwords, card details and browser sessions and sends them to criminals. It usually arrives with an illegal or counterfeit program.
Phishing and smishing – a fake e-mail or text message that leads you to a bogus bank, postal service or shop website. Smishing is the same thing, only via SMS or messaging apps.
Trojan horse – a program that looks useful but starts malicious activity once launched. It does not replicate itself, which sets it apart from a classic virus.
Botnet – a network of infected devices controlled from a single centre. It is used for attacks, spam and password guessing; the owner usually notices nothing.
Zero-day vulnerability – a software flaw the manufacturer does not yet know about and for which there is no patch yet. That is exactly why protection must recognise not only known viruses but also suspicious behaviour.
What to do to avoid it
- Install operating system and app updates straight away – most attacks exploit vulnerabilities that were patched long ago.
- Turn on two-factor authentication for your bank, e-mail and social media.
- Do not use the same password in several places. Use a password vault rather than your browser’s memory.
- Do not open unexpected attachments or links, even if the sender seems familiar. If in doubt, call the sender.
- Download apps only from the developer’s website or an official app store.
- Make backups and keep at least one of them disconnected from the network.
- Install protection on all your devices – not just your computer, but your phone and tablet too.
Which protection guards against what
For home users: Kaspersky Standard includes antivirus protection, safe browsing and payment protection. Kaspersky Plus additionally gives you an unlimited VPN, a password vault and data leak monitoring – useful if you often connect to public Wi-Fi. Kaspersky Premium adds an identity document vault, Safe Kids and expert support. You will find all the options in the section For home users.
For business: Kaspersky Small Office Security and Kaspersky Next – from ready-to-use protection for a small office to EDR and XDR capabilities managed from a single console.
Not sure what you need? Call +370 676 10000 – we will help you choose based on the number of devices and your needs.