📋 Tender Overview
In the third quarter of 2024, Rostelecom specialists repelled and investigated 11 targeted attacks on infrastructure, more than half of which were initiated by pro-Ukrainian hacker groups. The attackers exploited vulnerabilities in external online resources, and also tracked user errors and violations of internal security rules by individual employees. In total, more than 1,300 attacks were repelled during this period, including phishing, DDoS and other types of threats.
The most popular among attackers were DDoS attacks aimed at the infrastructure that provides communication services to mass-market clients (B2C). The most powerful of them, UDP-Flood [1] , reached a peak of 5 Tbps or 440 million packets per second.
Cybercriminals are increasingly turning to well-known hacking tools, preferring to use standard operating system tools to minimize their presence in the infrastructure. At the same time, there is an increase in attacks on supply chains, which significantly complicates protection due to the multi-tiered structure, differences in the level of protection among suppliers, and the difficulty of identifying vulnerabilities at each stage of logistics.
