This is stated in the TRM Labs report.
According to the research, Russian-speaking cybercriminals are responsible for at least 69% of ransomware revenues, totaling over $500 million in 2023. The two largest operators of malicious services, Lockbit and ALPHV/Black Cat (both Russian-speaking), earned about $320 million from attacks.
Additionally, Russian-speaking darknet marketplaces account for about 95% of global drug sales traffic. These platforms continue to dominate the black market, offering a wide range of illegal goods and services, attracting many buyers worldwide.
Experts note that the high organization and technological equipment of Russian-speaking cybercriminals enable them to conduct complex attacks and evade law enforcement. They actively use encryption, anonymous networks, and cryptocurrencies to hide their tracks and launder money.
