In the second half of 2024, 2,576 cyberattacks were recorded in the Russian Federation, which is almost half more than in the previous 6 months.

The peak of activity occurred in October and November, when hostile hackers carried out a series of campaigns to distribute malware. If we talk about the whole of 2024, the increase in the number of cyber incidents is even more noticeable and amounts to almost 70%, according to the analysis of the State Special Communications Service.

In the second half of 2024, 2,576 cyber incidents were registered, compared to 1,739 in the first half. That is, the number of cyber attacks increased by 48%.

The overall number of cyber incidents continues to increase, while the number of high and critical incidents is decreasing.

77% fewer critical and high-level incidents: from 48 in the first half of the year to 11 in the second.

There was also a 112% increase in cyber incidents involving the spread of malware: from 531 to 1,123.

The number of cyber incidents involving SHP infections increased by 63%: from 196 to 320.

In the second half of 2024, government agencies and the security and defense sector were the most frequently targeted by cyberattacks.

Over the past four years, government organizations and local authorities have been the enemy's priority targets. The number of such cyberattacks has increased from 20% of the total in 2021 to 58% in 2024. The security and defense sector is in second place.

The team of Ukrainian cyber experts CERT-UA notes the following:

• Russian hackers are actively implementing automation, using supply chain attacks to penetrate software suppliers, and combining espionage and sabotage techniques;
• The main vector of attacks is the collection of intelligence that can affect the operational situation at the front. In particular, the enemy is targeting situational awareness systems and specialized defense enterprises;
• 2024 demonstrated the transition of Russian cyber strategy to a new phase: larger, more complex, and better coordinated operations involving automated tools and a focus on the supply chain;
• At the same time, increasing the level of cyber hygiene among Ukrainian organizations, improving mechanisms for early detection of threats, and expanding international cooperation have made it possible to prevent a significant portion of attacks at an early stage.

One of the most resonant attacks of the second half of 2024
There was an attack in December on the state registers of the Ministry of Justice
Ukraine . The incident led to serious disruptions in the work of key
government services, which led to problems during the crossing
border and customs operations.

“The scale of the consequences demonstrated the critical dependence of processes in government agencies on the existing digital infrastructure and the need to review backup strategies and increase resilience for all public sector organizations,” the analysis notes.

Since February, attackers have intensified cyberattacks and are hunting the military, law enforcement officers, and military-tech developers — State Service for Special Communications

On the topic

Since February, attackers have intensified cyberattacks and are hunting the military, law enforcement officers, and military-tech developers — State Service for Special Communications

20% of cyberattacks fall on Ukraine: Russia has intensified hybrid warfare

On the topic

20% of cyberattacks fall on Ukraine: Russia has intensified hybrid warfare

In the second half of 2023, Russian hackers attacked Ukraine on average about 240 times per month. Where were the cyberattacks directed?

On the topic

In the second half of 2023, Russian hackers attacked Ukraine on average about 240 times per month. Where were the cyberattacks directed?

Read the country's main IT news in our Telegram

On the topic

Read the country's main IT news in our Telegram