Kaspersky reveals over 3.9m local malware incidents in Sri Lanka

As cyber threats continue to grow in scale globally, new data highlights that local malware infections remain a persistent risk for users in Sri Lanka. According to Kaspersky, which detected an average of half a million malicious files every day worldwide in 2025, offline infection vectors continue to contribute significantly to the regional threat landscape. 

Data from Kaspersky Security Network (KSN) shows that during the third quarter of 2025, Kaspersky detected 3,938,281 local malware incidents on the computers of KSN participants in Sri Lanka. During this period, 23.2% of users in the country encountered local threats, placing Sri Lanka 53rd globally in terms of exposure to malware spread through local infection vectors.

Local threats primarily include worms and file viruses, which remain the dominant forms of malware affecting users through removable media such as USB drives, CDs, DVDs, and other offline methods. These infections highlight how often users are targeted by malware transmitted outside the Internet environment, often through shared or portable devices. Unlike online threats that rely on web-based exploitation or social engineering, local threats exploit physical proximity and device sharing to spread malicious code.

Protection against these local infection threats requires more than just traditional antivirus capabilities. Effective defense also demands integrated firewalls, anti-rootkit technologies, and strict control over the use of removable devices. These layers of security help detect, contain, and prevent malware from spreading through offline media and minimize the risk of compromise.

The data from Kaspersky’s Security Network in Sri Lanka indicates that local infections remain a persistent challenge, particularly in environments where shared removable media is common. Users and organizations must therefore adopt a comprehensive cybersecurity posture that includes endpoint protection combined with device management policies to limit the risks posed by physical media.

“While global figures show just how massive today’s threat landscape has become, local infection vectors remain a critical part of the picture, especially in regions where physical data transfer methods remain prevalent,” said Adrian Hia, Managing Director for Asia Pacific at Kaspersky. “Organizations need to employ multi-layered protection strategies that include antivirus, firewall, and device control to effectively combat these threats and safeguard their networks.” 

Globally, countries with the highest percentage of users attacked by local threats include Turkmenistan, Tajikistan, Uzbekistan, Afghanistan, and Yemen, where infection rates exceed 30%. While Sri Lanka ranks 53rd worldwide, the rising volume of local malware incidents serves as a critical reminder for individuals and businesses to remain vigilant.

As Sri Lanka continues to expand its digital footprint, the threat landscape evolves and demands robust cybersecurity defenses. Kaspersky provides a range of solutions designed to protect users from both online and offline threats, enabling safer use of technology in homes and workplaces alike.

About Kaspersky

Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect individuals, businesses, critical infrastructure, and governments around the globe. The company’s comprehensive security portfolio includes leading digital life protection for personal devices, specialized security products and services for companies, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help millions of individuals and over 200,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.