Хакеры пошли в бизнес: число кибератак на российские компании кратно выросло

Most targeted critical industrial and infrastructure facilities

Over the past year, the number of cyberattacks on Russian companies has increased 2.5 times compared to 2023, reaching 130,000, according to RED Security analysts. Most of them were aimed at critical industrial and infrastructure facilities. Since the beginning of 2025, new serious cyberattacks have already occurred, and experts predict that in the future, the share of successful cyberattacks may grow to 10%.

During the year, about 26,000 cases were recorded that can be classified as critical. They could lead to financial losses or even the shutdown of the company.

Informzashita confirms an increase in the number of cyberattacks in the field of information security in Russian companies. Over the past year, their number amounted to about 140,000, which is 2.7 times more than in the previous year. In the second half of the year, there was an increase compared to the first, the number of incidents increased by approximately 30%.

RED Security notes that in 2024, hacker attacks were most often aimed at organizations that belong to critical information infrastructure, such as banks, industrial enterprises, and telecommunications companies. They accounted for about 64% of the total number of incidents for the year.

The most vulnerable industry was industry. Last year, organizations from this area accounted for only 47% of attacks.

If we consider only highly critical attacks, then the share of organizations from critical information infrastructure increased to 68% compared to 2023, according to RED Security.

According to the company's experts, the main threat to business as a whole is posed by politically motivated hackers (hacktivists), who carry out attacks not to obtain financial gain, but to cause damage to a specific company. However, Aidar Guzairov, CEO of Innostage, notes that, in addition to the continuing risk of threats from politically motivated hackers, cybercrimes for financial gain also remain relevant. At the same time, attackers are constantly evolving: they improve their skills, improve attack methods, and find new tools to achieve their goals.

According to Fedor Chunizhekov, head of the research group at Positive Technologies, a "moderate" increase in the number of successful cyberattacks is expected in 2025. It is predicted that it will be from 5 to 10%. At the same time, the emphasis may shift to digital espionage aimed at exerting pressure on business and government structures in Russia.

There will also be a risk of attacks on software supply chains (software vendors for companies) and targeted attacks on small and medium-sized businesses. This is because they have fewer protection options.

In the second quarter of 2024, 35 cyberattacks were recorded in industry worldwide. Most of those affected were manufacturing enterprises from various industries. It turned out that many companies do not have time to modernize their protection systems or have difficulty tracking cyber threats.

The most frequent consequence of such attacks was the leakage of confidential data — 65% of successful cases. Trade secrets attract cybercriminals the most, and in every third successful attack, the main activity of companies is threatened.

Read more on the topic:

Hackers attack Russian military units, defense industry enterprises and military support funds

There is a database of hackers about all Russians in the darknet

Cunning, fast, invisible: the new malware Loki attacks Russian enterprises

Now on home