In the first half of 2025, 39% of hackers were recorded in the information system of Russian companies for the purpose of developing the network. It was reported by Kommersant. The rate of incidents related to collecting information about vulnerable places in IT infrastructure increases more than five times.

Analysts explain that such tactics of attackers are related to the desire to use the most complete information before conducting a full cyber attack into the organization. According to Bi.zone, the rate of “intelligence”, meaning attacks to collect information about companies, mainly about the gaps of web applications, up more than 5 times, from 6.8% to 38.65%.
At the same time, the classic attacks of the Viking people aims to intercept user accounts and try to eliminate the server hack has become less common. The rate of authentic data theft, including password, decreased by nearly 2.5 times, from 14.8% to 6.3%, according to Bi.zone experts.
It should be noted that most of the Russian online resources attacked the Russian IP address, explained by the use of geographical filters to prevent unwanted foreign traffic, as well as the use of Proxy and VPN servers to take a detour. In the first half of 2025, spies and financial benefits have become the main target of professional hackers in nearly 90% of attacks.