Russia — Cyber Threat Profile
Russia operates a highly advanced and militarized cybersecurity apparatus integrated with national intelligence and defense structures. Cyber governance is coordinated through multiple state security agencies overseeing domestic control and external cyber operations. Strategic priorities include critical infrastructure defense, information control, and offensive cyber capability development. Russia conducts sustained espionage, disruption, and influence campaigns globally while defending domestic networks from retaliation and cybercrime. Legislative frameworks emphasize sovereign internet control and infrastructure isolation to maintain regime stability and operational resilience.- National CERT/CSIRT: RU-CERT
- World Cybercrime Index 2024 (origin significance): 58.39 / 100, #1 worldwide
- Secure Internet servers per 1M people (2024): 26,105.3 (source: World Bank)
- Internet users (2024): 94.4% of population (source: World Bank)
Latest Russia coverage
- Extortion crew hits Russian firms and flags who paid 2026-09-20 · Ransomware
- NightEagle spies pivot from Asia to Russian networks 2026-09-16 · Nation-State
- Ransomware crew now takes orders over a chat app 2026-09-04 · Ransomware
- Spyware steals Telegram chats and secretly records audio 2026-08-13 · Nation-State
- Hackers backdoor TrueConf servers to infect meeting guests 2026-08-11 · Nation-State
- Hackers flood npm with 993 fake packages to hit one bank 2026-08-11 · Cyber Incidents
- Russian factories hit by new ransomware built for Windows and ESXi 2026-07-30 · Ransomware
- Hackers hijack ViPNet updates to backdoor Russian government networks 2026-07-16 · Nation-State
- Google warns Russia's influence network is pivoting from Ukraine back to the West 2026-06-29 · Nation-State
- Secret Blizzard (Turla/FSB Center 16) ISP-Level AiTM Against Moscow Embassies: ApolloShadow Malware Installs Kaspersky-Masquerading Root Certificates and UpdatusUser Hidden Admin 2026-02-16 · Nation-State
- Sandworm (APT44) Deploys Trojanized KMS Activators Against Ukrainian Users: BACKORDER Go Loader, DcRAT Espionage, and Kalambur TOR-Based RDP Backdoor 2026-02-16 · Nation-State
- Eduard Benderskiy Named: The Former KGB Officer Who Shielded Evil Corp from Russian Law Enforcement 2026-02-16 · Cyber Incidents
- U.S. Indicts Dmitry Khoroshev as LockBit's Developer and Administrator: $500M Extorted, 2,500 Victims in 120 Countries 2026-02-16 · Ransomware
- Sandworm (UAC-0133) Plans Coordinated Cyber Sabotage Against 20 Ukrainian Critical Infrastructure Facilities: BIASBOAT Linux QUEUESEED Variant, LOADGRIP ptrace Injector, and Supply Chain Compromise 2026-02-16 · Nation-State
- Operation Cronos Fallout: LockBit Admin Panel Exposed, 193 Affiliates Identified, and Post-Disruption Activity Reveals Inflated Victim Counts 2026-02-16 · Ransomware
Threat actors targeting Russia
- Armored Likho APT
- BlackJack Hacktivist
- GamaCopy APT
- Head Mare APT
- Inception APT
- IT Army of Ukraine Hacktivist
- Jewelbug APT
- Audit Team Ransomware · 10 incident(s)
- Cl0p Ransomware · 3 incident(s)
- Booba Project Ransomware · 2 incident(s)
- Chaos Ransomware · 2 incident(s)
- LockBit Ransomware · 2 incident(s)
- Akira Ransomware · 1 incident(s)
- DragonForce Ransomware · 1 incident(s)
- Fog Ransomware Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Handala Hacktivist · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- Play Ransomware Ransomware · 1 incident(s)
- Qilin Ransomware · 1 incident(s)
- SafePay Ransomware · 1 incident(s)
- The Gentlemen Ransomware · 1 incident(s)
- Cyber Partisans Hacktivist
- Space Pirates APT
- ZIRCONIUM APT
Most targeted sectors
- Technology 6 incident(s)
- Business & Professional Services 5 incident(s)
- Manufacturing 3 incident(s)
- Retail & Consumer 3 incident(s)
- Education & Research 2 incident(s)
- Media & Journalism 1 incident(s)
- Telecommunications 1 incident(s)
Recent claimed incidents
- TEK SPB 2026-09-20 · Technology
- Paid Victim 192EB2B6AD7B98D9 2026-09-18
- buben 2026-09-16 · Other
- palletshop 2026-09-16 · Retail & E-Commerce
- Paid Victim F9CF4B639CAC1B18 2026-09-13
- mansurovogroup 2026-09-04 · Other
- Demidov Steel Group 2026-08-26 · Manufacturing
- Chernyy & Associates 2026-08-24 · Professional Services
- vit-best.com 2026-07-27 · Education
- argonautms.com 2026-07-21 · Technology
- URA Group 2026-07-07 · Business Services
- I-SYS 2026-06-25 · Technology
- mihana-v.com 2026-06-22
- FESCO Adecco 2026-06-08 · Business Services
- Paid Victim 111CEAA5AD9DA2F1 2026-06-04