The number of identified cyber threats of different types increased in Belarus in 2026

In 2026, the number of identified cyber threats of various types increased in Belarus. This was stated by experts at the forum “Cybersecurity 2027”, writes BelTA.

According to Kaspersky, approximately one in three organizations in Belarus faced local threats in 2026. These include malware that reaches computers, particularly through removable media and installation files. In addition, the number of cases of detection of ransomware has tripled. 28% of users in Belarus faced various web threats.

One notable area is cyber espionage. Such attacks can be aimed at a long-term invisible presence in the corporate network and obtaining information about the organization. According to experts, in the region there are complex groups that attack organizations of the public sector, industry and financial sphere.

In one of the latest waves of attacks linked to the GOFFEE group, experts counted more than 120 potential victims. To penetrate the organization, the attackers used, among other things, individually prepared phishing letters. Their content and decoy documents were created taking into account the specifics of specific recipients, including using artificial intelligence.

Another trend is attacks through supply chains. In this case, attackers seek to penetrate the system not directly, but through a contractor, software provider or other trusted service. This approach allows you to use a less secure partner infrastructure to access a larger organization.

According to experts, in the world about one in three companies over the past year in one form or another suffered from attacks on the supply chain. This could involve both infected open source components and compromised software that is distributed through official channels.

What threats will come to the fore in 2027?

Experts identify three key risks. The first is to accelerate attacks through artificial intelligence and autonomous agents. After the initial penetration of the infrastructure, attackers will be able to conduct intelligence faster, move between systems and expand access.

The second risk is associated with an increase in the number of vulnerabilities and a reduction in the time between their detection and the start of operation. According to experts, with the use of AI, creating tools to exploit new vulnerabilities can take not weeks, but hours. This means that organizations will need to install updates faster and systematically monitor the state of their IT infrastructure.

The third is attacks through contractors and suppliers. Even if the organization itself has built a reliable security system, a vulnerability in the software product or infrastructure of the partner can become by penetrating its network.

Experts note that one installation of security software is not enough. To mitigate risk, organizations need to know which devices, servers, and programs are being used in their infrastructure, identify vulnerabilities in a timely manner, limit contractor access, and have a plan of action in case of a successful attack.

Staff training also plays an important role: phishing emails, fake websites and other social engineering techniques remain common ways of initial penetration. Therefore, cybersecurity should include not only technical means, but also clear rules for working with information and regular training of personnel. What phishing emails are often opened by employees of organizations, said cybersecurity experts