Russian-speaking underground - changes in the risks, attack surface and modus operandi

No ratings

Presented at Hack.lu 2025 by

Vladimir Kropotov

Criminal business processes are significantly reshaped in recent years due to appearance and accessibility of new technologies and significant changes in the geo-political landscape. The presentation will focus on the changes of behaviour of russian-speaking criminal groups, significant developments and changes on the cyber underground. Those changes are affecting the lists of priority targets, geographical location of the targets of attacks, criminal business processes, modus operandi and priorities of criminal groups. The presentation will also include case studies on the criminal business processes related to money mule services, attacks, leveraging e-commerce platforms, reshipment services, offers of commit violent actions in the particular regions of EU, appearance of the business models in EU, which was previously leveraged in the Russian-speaking countries.