Kaspersky Reveals 500 Thousand Business Attack Exploitation Efforts In Indonesia

JAKARTA - The latest data from global cybersecurity firm Kaspersky reveals that the vulnerability in business networks continues to make companies in Indonesia vulnerable to potential cyber attacks.

Kaspersky managed to find and block 524,657 exploits targeting organizations in Indonesia, from January to June 2025, equivalent to an average of 2,915 per day.

"The blocking of half a million business exploitation in Indonesia in the first six months of this year shows how persistent cyber threat actors are," said Adrian Hia, Managing Director for Asia Pacific in Kaspersky.

Exploitation (exploit) is a type of malicious program designed to exploit bugs or vulnerabilities in software to gain access without permission. If left unchecked, these weak points serve as open doors for cybercriminals.

Kaspersky noted that the 10 most exploited vulnerabilities include new zero-day gaps as well as old problems that have not been fixed and are often ignored by organizations.

The zero-day vulnerability itself is a security gap that vendors don't yet know, so they don't have a patch and are at high risk because it's easy for attackers to take advantage of.

Cybercriminals, and in some cases even advanced persistent threat groups (APT), focus on widely used devices such as remote access software, document editing, and recording systems.

Interestingly, low-code/no-code (LCNC) platforms as well as frameworks for AI-based applications are also starting to become targets. This shows that threat actors are moving quickly following new technological trends as digital adoption increases in the business sector.

Hia added that companies need to prioritize the improvement of known weaknesses and use security solutions that are able to mitigate post-exploitation actions, so that threats can be prevented before it is too late.

"With continued vulnerabilities, it is important for businesses in Indonesia to prioritize improving known weaknesses and using security solutions that can mitigate post-exploitation actions, so that threats can be stopped before it's too late," he stressed.