In Southeast Asia, Kaspersky estimates 24 million on-device threats.

The malware that Kaspersky describes as on-device risks usually spreads through removable media, such as USB drives, CDs, and DVDs, or by files that come on PCs in non-open formats, such as encrypted files or complicated installers. The data presented is derived from Kaspersky Security Solutions scans, which reveal when files are produced or accessed on hard drives and when removable storage devices are scanned.

"The growing digitization of financial systems, e-commerce, and other industries has increased the number of internet users and expanded the attack surface for cybercriminals," said Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky. Businesses also faced a large number of threats and attacks as a result of various levels of security protection and a lack of knowledge about best practices.

Yeo went on, "Robust security solutions that can treat infected items and further strengthened with a firewall, anti-rootkit capabilities, and control over portable devices are necessary to protect against attacks originating from removable devices or non-open form files. To stop the spread of malware and viruses, regularly scan your computer. Kaspersky suggests a number of actions that organizations can take to strengthen their defenses against these threats. Important suggestions include routinely storing up data for easy access in an emergency and updating software to stop vulnerabilities from being exploited.

Other recommendations include staying away from pirated software, evaluating supply chains for any weaknesses, and keeping a careful eye on network access to spot odd activities. It is advised to use threat intelligence data and tools such as the Kaspersky Unified Monitoring and Analysis Platform to establish a Security Operations Center (SOC). Kaspersky recommends adopting technologies like the Kaspersky Automated Security Awareness Platform to increase employee cybersecurity awareness. This ensures that staff members are informed about the risks and ways to defend themselves from cybersecurity threats.

The company advises companies without specialized IT security personnel to subscribe to managed services like Kaspersky MDR to improve security capabilities and cultivate internal expertise. Kaspersky provides simple 'install and forget' protection for very small enterprises with products like Kaspersky Small Office Security, which handles cybersecurity requirements without a specialized IT administrator.