The landscape of cyber threats in Russia has shifted significantly in the first half of 2026. According to data from StormWall, the total number of DDoS attacks increased by 73 percent compared to the same period in 2025. These incidents are not only more frequent but also demonstrate a higher intensity, with some attacks reaching peak values of 3.5 terabits per second.
Early 2026 saw companies facing incidents exceeding 2 terabits per second, a notable increase from the previous year. Beyond sheer volume, the nature of these threats has evolved. Attackers are increasingly targeting specific business-critical services, such as payment gateways, rather than relying solely on massive network-layer traffic spikes.
A critical challenge for infrastructure security is the origin of these threats. Currently, more than 50 percent of all DDoS attacks are initiated from within Russia. This domestic origin complicates the detection and neutralization processes for security teams, necessitating a shift toward the Security-by-Design approach where protection is integrated into the architecture from the start.
