Russian businesses are increasingly being attacked via email

During the nine months of 2025, the majority of Russian companies (81%) received phishing emails, malicious attachments, phishing messages and other unwanted messages. This is stated in the Kaspersky Lab report, available on Gazeta.Ru.

Companies in the telecommunications sector most frequently experience email attacks, with 86% of organizations reporting such incidents. This is followed by industry (85%), energy and retail trade (each 84%), finance (83%), and education and transportation (each 81%). Less frequently, threats are noted by government agencies and construction companies (78%), as well as the IT industry (75%). Separately, the interest of attackers in the hotel business is growing: in 2025, a series of attacks were recorded on hotels in different countries, the purpose of which was to steal customer payment data.

Encryption software remains one of the main threats to businesses. In the third quarter of 2025, the number of attacks on Russian companies using such software through corporate emails increased by 45% compared to the same period last year.

Among the most common types of malicious threats, experts identify Trojans (96%), phishing emails intended to threaten users (87%), spyware Trojans (76%), backdoors (72%), stealing Trojans (71%), downloaders (68%), exploits (62%), and droppers (50%).

In addition, the level of spam in corporate mail remains high: in the 10 months of 2025, its spam ratio accounted for an average of 44% of the total incoming mail volume.

According to Kaspersky GReAT director Igor Kuznetsov, the targets of email attacks have increased significantly in 2025. Attackers are increasingly tailoring mailings to actual business processes and corporate events, using logical domains and carefully crafted sender addresses.