BSI Reports High Threat from Cyberattacks in Germany, Russia Identified as Main Suspected Aggressor

The BSI's mid-2024 to mid-2025 IT security report highlights a sustained high-risk environment for cyberattacks in Germany. Critical sectors like public administration, defense, law enforcement, and security faced intensified threats, including a 52% rise in DDoS attacks coinciding with major political events. Russia is regarded as the main suspected actor behind these attacks, which appear to have geopolitical and military motivations. Ransomware and data extortion remain pressing issues, though authorities have had some success against financially motivated groups such as LockBit and Alphv. Alarmingly, the number of newly discovered software vulnerabilities rose by 24%, averaging 119 per day. SMEs continue to be the most targeted, with 80% of attacks aimed at them, often exploiting poor cybersecurity postures. Furthermore, consumer fraud tactics advanced, notably through quishing, where counterfeit QR codes in public areas mislead victims into divulging payment data.