Threat Zone 2024
Research of the cyber threat landscape in Russia and other CIS countries
About
Threat Zone 2024 is a joint research effort of our BI.ZONE Threat Intelligence, TDR, and DFIR teams. We also rely on statistics derived during the operation of our products and services.
The research will help you understand the methods used by adversaries to launch attacks in Russia and other CIS countries. It provides up‑to‑date information that organizations need to manage risks, make strategic decisions, and strengthen defenses.
In this publication, you will find:
- Threat actor profiles
- Analysis of adversary tools and techniques
- Case studies based on our experience
Threat actor taxonomy
We classify and name the cybercriminal groups covered in this research according to their dominant motives:
Hyenas
Hacktivism
Wolves
Financial gain
Werewolves
Espionage
50+
groups traced by the BI.ZONE Threat Intelligence team in 2023
$5.3M
in ransom demanded by Shadow Wolf from one of its victims
Threat landscape overview
The document includes the following rankings and overviews:
Most attacked industries
Most popular adversary techniques and ways to detect them
Top 10 malware families used in attacks against Russian and CIS organizations
Vulnerabilities exploited in attacks against Russian and CIS organizations
Most widespread adversary tools
Popular LOLBAS
Case studies
In 2023, our SOC processed over half a million alerts while our response team helped more than 70 companies cope with the consequences of cyberattacks. Our threat intelligence specialists tracked dozens of cybercriminal groups in Russia and other CIS countries.
In the research, we take a close look at:
Incidents detected by the BI.ZONE TDR team in the course of monitoring
Attacks handled by our DFIR team
580,000+
alerts processed by BI.ZONE TDR analysts in 2023
70+
companies successfully guided by BI.ZONE through cyberattacks in 2023
