Sri Lanka recorded approximately 14.9 million instances of local malware affecting user computers in 2025, with 37.4% of individuals encountering threats transmitted via removable USB drives, CDs, DVDs, and other offline methods, as reported in the latest Kaspersky Security Bulletin. This statistic positions Sri Lanka at 48th globally in terms of exposure to local threats.
The findings from the Kaspersky Security Network (KSN) regarding the period from January to December 2025 indicate that local infection vectors remain a considerable concern for users and organizations in Sri Lanka, particularly in contexts where the use of shared removable media is prevalent.
“Local threats continue to be a significant risk for users in Sri Lanka,” stated Sam Yan, Kaspersky’s Head of Sales for Asia Emerging Countries. “While there is a strong focus on internet-based attacks, offline infection methods via USB drives and other removable media represent a critical vulnerability, especially in workplaces and educational settings where such devices are commonly exchanged.”
The report emphasizes that worms and file viruses constitute the majority of local infection cases. These types of infections typically arise from compromised removable storage devices, often spreading discreetly across different systems before being detected. Unlike online threats that necessitate internet access, local malware can propagate solely through the transfer of physical media.
To effectively combat local threats, a comprehensive security strategy is essential, extending beyond conventional antivirus solutions. A robust defense requires integrated firewalls, anti-rootkit technologies, and stringent controls over the usage of removable devices. These multi-layered security measures are crucial for detecting, containing, and preventing malware spread through offline media, thereby reducing the risk of system breaches.
In 2025, the global threat landscape witnessed notable increases in certain categories of malware. Kaspersky’s detection systems identified an average of 500,000 malicious files daily throughout the year, which represents a 7% rise compared to 2024. Significantly, detections of password stealers surged by 59% globally, spyware detections rose by 51%, and backdoor detections saw a 6% increase year-over-year.
In the Asia Pacific region, password stealer incidents climbed by 132%, while spyware detections increased by 32%, highlighting a surge in cybercriminal activities aimed at compromising user credentials and sensitive data across the area.
“The data from Sri Lanka underscores the importance of local infections within the overall security landscape,” Yan remarked. “Organizations need to implement a comprehensive cybersecurity strategy that includes strong endpoint protection alongside device management policies to mitigate risks associated with physical media transfers.”
Kaspersky advises both individuals and organizations to adopt various protective practices. Users should refrain from connecting unfamiliar USB drives or removable media to their computers, ensure all software is updated with the latest security patches, and utilize reliable security solutions like Kaspersky Premium for thorough protection.
Organizations are encouraged to establish strict guidelines regarding the use of removable devices, ensure all endpoints are equipped with updated security software featuring real-time protection, regularly back up vital data to isolated systems, and deploy advanced security solutions such as Kaspersky Next for enhanced visibility across their corporate infrastructure.
“As Sri Lanka continues to broaden its digital presence, the evolving threat landscape necessitates robust cybersecurity defenses against both online and offline attack vectors,” Yan concluded. “Kaspersky offers a variety of solutions aimed at safeguarding users from both web-based and local threats, facilitating safer technology use in both domestic and professional environments.” The complete regional analysis and global threat statistics can be accessed in the Kaspersky Security Bulletin at Securelist.com.
Photo Caption: Sam Yan, Head of Sales for Asia Emerging Countries at Kaspersky
Financial Chronicle Biz English | Sri Lanka Business News.