DDoS Attacks Target Small Businesses
DDoS attacks on small and medium-sized businesses in Russia are increasing in sophistication and power, despite a 65% drop in the average number of attacks over nine months, according to Megafon's analysis of cyber threat data from 2024 to 2026.
Consensus
- The average number of DDoS attacks over nine months in 2026 decreased by 65% compared to the previous year.
- The maximum traffic capacity (Gbps) of DDoS attacks in 2026 was 46% higher than in 2025.
- The speed of packet transmission (Kpps) in DDoS attacks increased by 67% from 2025 to 2026.
- The maximum packet speed reached a new record of 94,043 Kpps in 2026, up from 72,210 Kpps in 2025.
- The median attack power increased by 30% and median packet speed by 41% compared to 2025.
- The longest DDoS attack duration in 2026 reached seven days, up from three days in 2025.
- Saturday remains the most frequent day for DDoS attacks, for the second year in a row.
- Cybercriminals are increasingly targeting small and medium-sized businesses due to weaker security compared to large corporations.
- DDoS attacks are the most common cyber threat, affecting 42% of surveyed Russian companies.
- 58% of companies that experienced DDoS attacks reported losses exceeding one million rubles.
- Attackers use combinations of traffic types, varying attack profiles, and AI to adapt in real time and bypass defenses.
- AI is used to automate reconnaissance, identify vulnerabilities, adapt malicious code, and generate complex traffic patterns.
Points of divergence
- Megafon includes DDoS protection as part of its internet connectivity service for businesses. — riamo
- No additional claims beyond the data on attack volume and metrics are provided. — kommersant
Coverage (4 sources)
- DDoS-attacks increasingly target small and medium business — РИАМО
- «Megafon»: average number of DDoS attacks over nine months decreased by 65% — Коммерсантъ
- «Megafon»: average number of DDoS attacks over nine months decreased by 65% — Коммерсантъ
- «Megafon»: average number of DDoS attacks over nine months decreased by 65% — Коммерсантъ