Istanbul: Cyberattacks are changing direction as artificial intelligence (AI) accelerates both the scale and sophistication of threats, with 'industry sector' replacing 'finance sector' as the most targeted sector in 2025, according to Ilkem Ozar, general manager of Kaspersky Trkiye. Ozar said financial institutions had long been the primary target of cybercriminals, but the global threat landscape has shifted this year, both in Trkiye and worldwide.
According to Anadolu Agency, Ozar noted that energy companies, factories, and production facilities have left their operational technology (OT) systems underprotected due to years of delayed cybersecurity investment. This delayed security spending in industrial infrastructure created an opening for attackers. In Trkiye, industrial operations were similarly deprioritized, leaving companies exposed.
Ozar stated that for cyber attackers, industry had effectively become an easy target, with far more destructive attacks recorded throughout 2025, both espionage-driven and aimed directly at halting production. AI has become a force multiplier for attackers, fully embedded in their toolkits, leading to more realistic fake identities, phishing emails, and social-engineering campaigns, making exploitation easier and more targeted.
She highlighted that AI has lowered the barrier to exploiting vulnerabilities and producing customized attacks, citing the growing use of deepfakes. Personal data shared online can now be harvested and repackaged into highly convincing messages such as emails appearing to come from a user's gym or a familiar second-hand marketplace.
Ozar warned that if redirected to another page to complete a purchase or make a payment, individuals should be alert. The era of saying 'I clicked the link by accident' is over, she said, emphasizing the need for constant vigilance. Security solutions capable of automatically detecting and warning users about such threats are increasingly essential.
Ozar pointed out that advanced impersonation, personalized phishing, and automated malware development, powered by AI, have emerged as the defining trend of 2025. She also mentioned that corporate cybersecurity strategies will undergo a fundamental shift in 2026, as companies move away from standalone products toward continuous services.
Security is no longer just software, she said, describing it as a 24/7 monitoring service. XDR, MDR, and threat-intelligence services will become standard requirements. Once security systems are deployed, organizations must continuously manage alerts and respond to incidents, either through dedicated in-house teams or by outsourcing to vendors and specialized partners.
Managed Detection and Response (MDR), providing round-the-clock monitoring, threat detection, and active response, has seen rapid uptake in Trkiye since the second half of 2025, Ozar noted. She mentioned hearing customers increasingly say they will move to MDR in 2026, as basic security tools are no longer sufficient.
Ozar cautioned that attackers prioritize targets based on time and cost, leaving small and mid-sized companies that underinvest in security particularly vulnerable. The cybersecurity environment is like the food chain in the wild, she said, warning that those who fall behind get hunted. Energy, industry, telecommunications, healthcare, and logistics remain among the most exposed sectors due to the critical nature of their operations.
She also warned that Trkiye's transition to fully digital invoicing as of January 1, 2026, could trigger a new wave of attacks, particularly via fake invoices sent by email. Phishing attempts that say 'click this link to view details' will increase, she emphasized, highlighting the need for security solutions capable of detecting phishing.
Ozar mentioned that 2025 has been one of Kaspersky Trkiye's fastest-growing years, particularly in the corporate segment. From 2023 to 2024, the company grew 2.5 times, and in the nine-month period of 2025, it grew threefold compared with the same period last year, with expectations to close the year with similar momentum.
Growth came both from market expansion and from winning customers away from competitors, particularly among corporate clients, translating into higher market share and revenue. Despite layoffs across parts of the technology sector, Kaspersky continued to invest in human capital in Trkiye, Ozar stated. She highlighted that at a time when many companies were downsizing, Kaspersky hired new staff and expanded technical teams working with partners, reinvesting their growth back into the country.