Lozhkin told the AA correspondent that artificial intelligence will increasingly play a more decisive role in the preparation and execution of cyber attacks, as well as in the defense mechanisms of institutions.
Stating that attacks will be largely automated in the future, Lozhkin explained that the entire process, from collecting information and intelligence about the target before the attack to social engineering activities, from infiltrating systems to inserting malware and seizing data, can be managed by artificial intelligence.
Pointing out that these operations can be carried out with extremely high efficiency within a single system or through different artificial intelligence agents communicating with each other, Lozhkin said:
"We will encounter many fully automated attacks. The process will then continue with infiltrating systems with malware and blackmailing data. All of this will be carried out by artificial intelligence agents working within a single structure or through different interconnected structures. We will enter a period where there is almost no human intervention, where artificial intelligence fights against artificial intelligence."
Emphasizing that the development of technology in the last few years has also transformed cyber security, Lozhkin said, "Groups of highly trained and highly skilled artificial intelligence agents will protect institutions against agents that attack. We will witness artificial intelligence agents fighting each other, just like in a movie." he said.
"Financial institutions and large companies continue to be attractive targets."
Lozhkin said that artificial intelligence has also changed the methods used by cybercrime groups, and that cyber attacks, including ransomware, have become more targeted and advanced in the last two years.
Pointing out that artificial intelligence is increasingly used in the development of malware, Lozhkin stated that this changes both the nature of the software in question and the way attackers act.
Lozhkin stated that financial institutions and large companies continue to be attractive targets for cybercriminals, and that high amounts of payment may be demanded in exchange for systems seized in ransomware attacks.
Touching on the effects of geopolitical conflicts in the cyberspace, Lozhkin emphasized that state-sponsored advanced persistent threat (APT) groups are turning to more complex and difficult to detect methods rather than acting more aggressively.
Lozhkin pointed out that the element of stealth has come to the fore in APT attacks, especially since the beginning of 2026, and continued as follows:
"We can say that direct and overt aggression has decreased. Attackers no longer act with brute force, as if breaking down walls. This is especially evident in the methods of exporting data. Once inside an organization's security perimeter, attackers steal data through legitimate channels or disguise their activities as legitimate data traffic. We see that the stealth and ability to move undetected for advanced persistent threats has increased significantly."
"The conflicts in the Gulf were a turning point in the cyber threat environment"
Evaluating the cyber threat environment in the META region, Lozhkin said that the conflicts in the Gulf constitute a turning point in the cyber security outlook of the region.
Lozhkin explained that they detected many cyber incidents related to conflicts in February and March, and APT activities were at the top of these.
Stating that Kaspersky's research has identified various threat actors that directly target one of the countries affected by the conflict in the Gulf, Lozhkin added that these attacks were carried out with advanced and remarkable methods.
