Hackers have become less likely to go head-on. In the first half of the year, the share of attacks on banks, insurance companies, and exchanges using malware decreased to 64%, social engineering to 55%, and attacks through vulnerabilities almost disappeared. Instead, attackers are increasingly using ordinary administration tools, real accounts, and access through contractors.

Such an attack can begin with the compromise of an employee or partner, and then subtly develop within the infrastructure. At the same time, the share of DDoS attacks sharply increased to 36%, and the compromise of supply chains, trusted channels, and credentials reached approximately 9%.

The goals have also changed. Data leaks have lost their former value: their share decreased to 36%. Disrupting the core operations of companies came to the forefront – 45% of attacks, and the share of scenarios with direct financial losses increased to 18%.

Experts explain the shift simply: the leak market is oversaturated, databases are getting cheaper, and stopping processing or remote banking services can hit businesses much harder. According to the Central Bank, over 1.4 billion rubles were stolen from legal entities in the first half of the year – almost 3 times more than a year earlier.