Malaysians’ everyday digital habits are becoming part of the workplace, changing how businesses manage cybersecurity risks, according to Kaspersky.
Kaspersky’s latest findings* highlight the growing role of AI-powered tools across different aspects of daily life.
Among Malaysian respondents who have used AI tools, 87% use them to search for information, while 63% rely on them for work-related activities such as preparing reports, presentations, data analysis and idea generation.
Beyond professional use, more than one-third also turn to AI for personal purposes, including studying, entertainment, travel planning and everyday tasks.
Separate research** from Kaspersky points to a broader pattern in how Malaysians manage their online accounts and services. Despite the increasing role of technology in daily lives, only 57% of respondents have enabled two-factor authentication (2FA), while 44% continue to rely on easy-to-remember passwords and just 40% use password generators, suggesting that convenience often takes priority when managing online security.
As digital tools become a routine part of both personal and professional life, employees often use the same devices, online accounts, applications and digital services across both environments. While these technologies support accessibility and efficiency, they can also create additional opportunities for cybercriminals to exploit weak credentials, compromised accounts and other security gaps.
Locally, workplace flexibility continues to reshape how employees access digital tools and online services throughout the day. A study by the Malaysian Employers Federation (MEF) found that more than 70% of companies are now adopting hybrid working models.
As work increasingly extends beyond traditional office settings, employees are relying on a growing mix of digital tools and online services to stay connected and productive.
Recent threat intelligence from Kaspersky highlights how cybercriminals continue to target access to business systems and sensitive information. In 2025, the company detected and blocked 194, 692 spyware attacks targeting organisations in Malaysia, a 75% increase compared to the previous year. Meanwhile, businesses in the country also faced 212, 239 backdoor attacks, with detection surging 86% year-on-year.
Spyware is commonly used to collect sensitive information, while a backdoor helps attackers maintain unauthorised access to compromised systems. Together, they can enable cybercriminals to gather intelligence and remain active within a network for extended periods.
Cybercriminals are also capitalising on the growing popularity of AI-powered services to distribute malicious content and deceive users. Between January and early May 2026, Kaspersky detected more than 92,000 malware and potentially unwanted application attacks worldwide disguised as AI services, with Fake ChatGPT accounting for nearly half of all detections.
“One of the most significant cybersecurity shifts today is the role human behaviour plays in shaping organisational risk.
“Businesses can deploy sophisticated security strategies and solutions, but the reality is that employees do not leave their digital habits at the office door.
“The same behaviours that guide how people interact with technology in their personal lives can also carry over into the workplace. As the distinction between work and everyday digital activities becomes less clear, businesses need to pay closer attention to the human side of cybersecurity risk,” said Adrian Hia, Managing Director for Asia Pacific at Kaspersky.
To help reduce risks associated with increasingly connected personal and professional digital routines, Kaspersky recommends businesses to:
- Enable two-factor authentication (2FA) on work-related and personal accounts to reduce the impact of credential compromise.
- Encourage employees to build stronger digital habits through regular cybersecurity awareness and training programmes. Free learning resources such as Kaspersky Academy can help them better understand emerging cyber risks and safe online practices.
- Establish clear policies on the use of personal accounts, AI-powered tools, online services and devices when accessing work-related systems and information.
- Use separate accounts where possible for work and personal services, particularly when accessing AI tools, cloud platforms and online applications.
- Use centralised and automated solutions such as Kaspersky Next that can detect suspicious activities, strengthen protection against advanced threats and support faster investigation and response.
- Use unique and complex passwords for different online services to reduce the risk of multiple accounts being compromised. Solutions such as Kaspersky Password Manager can help users securely generate, store and manage passwords across multiple accounts. – BACALAHMALAYSIA.MY
- The study was conducted by Kaspersky’s market research centre in 2025. 3,000 respondents from 15 countries (Argentina, Chile, China, Germany, India, Indonesia, Italy, Malaysia, Mexico, Saudi Arabia, South Africa, Spain, Turkey, UK, United Arab Emirates) took part in the survey.
- The study was conducted by Kaspersky’s market research centre in November 2025. Respondents from 15 countries (Argentina, Chile, China, Germany, India, Indonesia, Italy, Malaysia, Mexico, Saudi Arabia, South Africa, Spain, Turkey, the UK, United Arab Emirates) took part in the survey.
