Islamabad: Kaspersky experts analyzed cyberthreats that use popular family-focused brands, such as Disney, LEGO, Toca Boca and others as bait. The research, based on selected keywords monitoring, revealed a steady rise in attack attempts, which increased by 38% from Q2 2024 to Q1 2025.
Kaspersky telemetry shows a consistent upward trend in the number of attempted attacks exploiting children- and family-related brands. Starting from just 89,000 in Q2 2024, the number of attacks has increased quarter by quarter, reaching almost 123,000 in Q1 2025. Throughout the reported period, Kaspersky detected over 432,000 such attempts.
LEGO-themed content accounted for the overwhelming majority of attacks, with over 306,000 attempts, followed by Disney (62,000) and Toca Boca (45,000). Paw Patrol and Peppa Pig were also used as popular lures, though to a lesser extent — 12,500 and 4,900 attempted attacks. Cybercriminals exploit the popularity and emotional familiarity of these brands to trick users into downloading malicious files, often disguised as cartoons or games. The more popular the brand is, the more attractive it becomes as a hook for threat actors.
Throughout the reported period, nearly 400,000 infection attempts were linked to Downloaders — software that may appear harmless but is often used to silently deliver other potentially dangerous applications. These downloaders are frequently disguised as games, videos, or installers related to popular brands, making them especially effective at tricking users.
Furthermore, over 7,800 cases involved Trojans, which can steal sensitive data, monitor activity or grant remote access to attackers. Meanwhile, adware accounted for over 6,400 attempted attacks, typically appearing as flashy games or video apps that bombard users with unwanted ads, slowing down devices and potentially opening the door to additional threats.
As part of the analysis, Kaspersky researchers identified multiple scam and phishing websites mimicking the design and branding of popular among family companies. Such scams are often indistinguishable from legitimate pages at first glance, with the only difference being the URL of the website.
Another discovery made by Kaspersky researchers involved scams exploiting the name of MrBeast — a YouTube celebrity widely followed by children and teens, and well-known for giving away expensive prizes like gadgets, money and even houses. Cybercriminals created phishing pages promising “free gifts from MrBeast,” including digital gift cards for platforms such as Roblox, Xbox and PlayStation. The site prompted users to choose their prize and complete a seemingly harmless task to claim it. To increase urgency, a countdown timer was displayed, urging visitors to “complete a sponsored activity” within a limited time to unlock the final reward code.
“Cybercriminals are masters of emotional manipulation — and there is hardly anything more emotionally charged than content children trust and love. By imitating popular brands or influencers like MrBeast, attackers create a sense of familiarity and excitement that lowers users’ guard. That’s why it’s essential for parents to stay informed and teach kids how to question ‘too-good-to-be-true’ offers before clicking,” comments Evgeny Kuskov, Security Expert at Kaspersky.
To keep your kids safe online, Kaspersky recommends parents to have open communication with their children about the potential risks they may encounter online and to enforce strict guidelines to ensure their safety. Kasperksy advises parents to install a trusted security solution, such as Kaspersky Premium, on the devices of their children. To help parents introduce their children to cybersecurity amidst the evolving threat landscape, Kaspersky experts have developed the Kaspersky Cybersecurity Alphabet with key concepts from the cybersecurity industry.. You can download the pdf of the book for free and go through the basics of cybersecurity with your child, building their cybersafe future. With dedicated apps for digital parenting such as Kaspersky Safe Kids, parents can effectively safeguard their children across both online and offline spaces.
