The power of DDoS attacks on Russian companies increased by almost 50%

The number of DDoS attacks on Russian organizations has decreased, but the attacks themselves have become more intense and more complex. At the same time, attackers are increasingly shifting attention from large organizations to small and medium-sized businesses.

According to the press service of MegaFon, for the first nine months of 2026, the average number of DDoS attacks decreased by 65% compared to the same period last year. A notable decline was recorded in the public sector and the B2C segment – more than twice. Among B2B companies, the figure decreased by 47%.

At the same time, the maximum volume of malicious traffic increased by 46%, and the speed of sending data packets by 67%. The peak value reached 94 thousand packets per second in thousandths (Kpps) against 72 thousand a year earlier. Median attack power increased by 30%, packet transfer rate – by 41%.

The leading attack in 2026 lasted seven days against three in 2025. For the second year in a row, more attacks occurred on Saturday.

Operator analysts attribute the complication of attacks with the use of artificial intelligence. Attackers combine different types of traffic, change load intensity and use AI to find vulnerabilities and bypass defense systems.

According to the Cybersecurity Index, a survey of more than 400 Russian companies, DDoS accounts for 42% of cyber threats. Among the victims, 58% estimated losses of more than a million rubles.

Small and medium-sized businesses are more vulnerable, where protection is often lower. In addition to overloading services, attacks can be accompanied by the introduction of programs for data encryption.