Cybercriminals Targeting Central Asia's Critical Infrastructure: A Rising Threat

Introduction

In early 2026, Central Asia has witnessed a surge in cybercriminal activities targeting its critical infrastructure sectors. These attacks encompass power grids, water systems, industrial control systems (ICS), healthcare facilities, and the financial sector, highlighting a pressing need for enhanced cybersecurity measures.

Recent Cybercriminal Activities

In May 2025, Kazakhstan experienced a large-scale Distributed Denial of Service (DDoS) attack that disrupted online services across government portals, banking systems, and telecommunications networks. This attack overwhelmed servers with excessive traffic, rendering critical digital infrastructure inaccessible for thousands of users. (timesca.com)

In November 2025, the Caspian Pipeline Consortium (CPC) infrastructure in Kazakhstan was targeted by naval drones, leading to the temporary suspension of shipments. This incident underscored the vulnerability of critical energy infrastructure to cyber-physical attacks. (timesca.com)

Targeted Sectors

• Power Grids and Water Systems: Cybercriminals have increasingly targeted power grids and water systems, aiming to disrupt essential services and cause economic damage. The integration of ICS and SCADA systems in these sectors has expanded the attack surface, making them attractive targets for cybercriminals. (scpress.org)

• Healthcare Facilities: Healthcare institutions in Central Asia have been targeted by cybercriminals seeking to steal sensitive patient data and disrupt medical services. The 2023 cyberattack on the All India Institute of Medical Sciences in New Delhi, which resulted in the loss of outpatient and research data, serves as a pertinent example of such threats. (stimson.org)

• Financial Sector: The financial sector remains a prime target for cybercriminals aiming to steal funds and sensitive financial information. The 2025 DDoS attack in Kazakhstan disrupted banking systems, highlighting the sector's vulnerability to cyber threats. (timesca.com)

Threat Actors and Tactics

While state-sponsored actors have historically been the primary threat to critical infrastructure, cybercriminal groups are increasingly involved in such attacks. These actors employ various tactics, including spear-phishing emails, exploitation of known vulnerabilities, and deployment of ransomware to achieve their objectives. The 2025 DDoS attack in Kazakhstan, for instance, was likely orchestrated by cybercriminals seeking to disrupt services and cause economic damage. (timesca.com)

Recommendations

To mitigate the risks posed by cybercriminals targeting critical infrastructure, the following measures are recommended:

• Enhanced Monitoring and Detection: Implement advanced monitoring systems to detect and respond to cyber threats in real-time.

• Regular Vulnerability Assessments: Conduct periodic assessments of ICS and SCADA systems to identify and remediate vulnerabilities.

• Employee Training: Provide regular cybersecurity training to employees to recognize and respond to phishing attempts and other social engineering tactics.

• Incident Response Planning: Develop and regularly update incident response plans to ensure a coordinated and effective response to cyber incidents.

Conclusion

The increasing frequency and sophistication of cybercriminal attacks on Central Asia's critical infrastructure necessitate a proactive and coordinated approach to cybersecurity. By implementing robust security measures and fostering collaboration among stakeholders, the region can enhance its resilience against these evolving threats.

Highlights:

• Ongoing DDoS Attack Disrupts Kazakhstan’s Digital Infrastructure - The Times Of Central Asia, Published on Tuesday, May 06
• Protecting Critical Infrastructure: Lessons from the CPC Drone Attack - The Times Of Central Asia, Published on Tuesday, January 06