The Central Bank of Russia published an overview of cyber incidents in the financial sector in 2024, reporting more than 750 notifications of attacks against financial institutions and warning that hacking techniques are becoming more sophisticated and harder to detect. Most incidents targeted the availability of firms’ information infrastructure and services, primarily through distributed denial-of-service attacks. The review also notes a growing use of supplier-focused attacks to gain access to financial institutions’ systems, multi-stage and multi-layer methods that can bypass traditional security controls, and repeat exploitation of previously compromised systems, including cases where access was sold to other fraudsters. To support sector preparedness, the Central Bank of Russia ran regular cyber drills, with more than 290 companies participating in 2024.