Experts predicted an increase in DDoS attacks on the educational sphere during the Unified State Exam

During the Unified State Exam in Russia, there may be a surge in DDoS attacks on the educational sphere, according to the analytical center of StormWall. Izvestia got acquainted with the experts' data on May 22.

Analysts have suggested that the number of DDoS attacks on online services of public educational institutions from May 23 to June 11, 2025, may increase threefold compared to the period from April 23 to May 11 this year and 1.5 times compared to the same period in 2024.

According to preliminary estimates, the attacks will mainly be directed at electronic platforms and servers of educational institutions that are related to the organization, conduct and publication of the final assessment results. Experts believe that DDoS attacks can be organized by students who will seek to disable information systems and disrupt the USE.

Intelligence glitch: the largest bot attack on government agencies in the Russian Federation has been stopped

At the same time, a new wave of cyber attacks has been recorded in the last two days.

The company clarified that DDoS attacks on online services of educational organizations usually have a low capacity (up to 100 Gbit/s). It is assumed that the capacity indicator will remain at the same level this year. Analysts attributed this to the fact that inexperienced hackers usually use the cheapest and most accessible tools to launch attacks. Sometimes small botnets with several dozen devices are purchased for this purpose.

"Russian educational institutions are actively using modern information systems to improve the quality of education, and this is a great achievement. However, these systems have weak protection against modern cyber threats that can cause great harm. Educational organizations need to think in advance about how to protect their online services from DDoS attacks during the exam," said Ramil Khantimirov, CEO and co—founder of StormWall.

Earlier, on May 21, the cybersecurity company Curator reported that Russia had neutralized the largest botnet attack on government agencies and public organizations in recent years, which included the activities of 4.6 million IP addresses. When attacking unsecured or poorly protected resources, a DDoS botnet of this size can generate tens of millions of requests per second and disable servers.