The most dangerous hacker groups of 2025 are named

Informzashita specialists told about the most dangerous hacker groups that staged cyber attacks with extortion on Russian companies in 2025. The international Head Mare is in the first place, it first appeared in 2023, its goal is organizations from Russia and Belarus. In January of this year, it accounted for about 15% of all extortion attacks.

From a black approach: hackers have quadrupled their attacks on Russia

The public sector, postal services and cargo and passenger transportation were among the most affected industries.

"Head Mare is attacking many people: the Kalashnikov concern, Russian Railways, and Belarusian information security integrators. At the same time, many such groups are pro—government, which means that they are "sitting" on the salaries of our enemies and attacking not the most vulnerable, but those whose hacking will bring maximum economic and information damage to Russia," added Alexey Gorelkin, Phishman CEO and information security expert.

LokiLocker is in second place, it appeared in 2023, and in January 2025 it was responsible for about 10% of attacks. Since April 2023, according to experts, at least 62 companies worldwide have been attacked by LokiLocker, 21 of them in Russia, Igor Bederov said. Small and medium-sized businesses from the construction, tourism, and retail sectors suffered mainly from the group's actions. It is believed that the backbone of LokiLocker consists of immigrants from Eastern European countries, including Poland and Ukraine, he added.

Babuk2 is in third place, the group operated in 2020-2021, it is believed that their imitators were created in 2025, the press service of Informzashchita clarified.

Read more in the exclusive Izvestia article:

Beware, evil attack: the three most dangerous hacker groups are named