30 April 2025

Lawless cyberspace

Luke Rodeheffer

Cybercrime is a growing global threat, causing trillions of dollars in economic damage annually. This report explores how Eastern Europe and Russia have become a significant hub for cybercriminal activity, fueled by historical legacies, economic disparities, and state connections.

The study outlines the key drivers of cybercrime in Russia and neighboring countries, including the rise of ransomware, the exploitation of geopolitical ‘grey zones’, and the blurred lines between hackers and state-sponsored cyber operations.

One of the most significant shifts analyzed in the report is the impact of the Russia-Ukraine war on cybercrime. As the war escalated, cybercriminal groups split along national lines, with some hackers supporting Russian intelligence while Ukrainian cybercriminals turned their efforts against Russia, engaging in financial fraud and targeted attacks.

Ransomware has emerged as the most profitable form of cybercrime in the region, overtaking other criminal activities like credit card fraud and botnet operations. Russian-speaking cybercriminals dominate the global ransomware industry, with an estimated 75% of ransomware revenue going to actors linked to the Russian-language underground. Despite international sanctions and takedown efforts, ransomware gangs have adapted, operating like structured organizations with management teams and even physical offices.

No comments: