Russian Hackers Switched from Russian Banks to Foreign
As a representative of Group-IB explained to the Russian media, new groups "often start working in their region: this was the case with Cobalt, with Silence in Russia, this is happening now with SilentCards in Africa". The “home” regions for them are a testing ground: having worked out the techniques, they move on. For example, the same “Russian-speaking troika” focused on goals in Asia, Africa, Europe and America”, he added.
A representative of Kaspersky Lab confirms this trend. “Attackers switched to countries that are less protected (Eastern Europe, the CIS, Asia, and so on)”, he notes.