AntiMalware•August 13, 2026•🇷🇺Translated from Russian

Russian Businesses Surge Chinese LLM Usage More Than 11-Fold in First Half of 2026

Russian small and medium-sized businesses along with large corporations have sharply increased their adoption of Chinese large language models. According to data from MWS Cloud, organizations consumed more than 400 billion tokens during the first half of 2026. This volume is 11.3 times higher than the 39.1 billion tokens recorded for the entire previous year.

The Qwen family remained the undisputed leader. Its share rose from 20 billion tokens and 51.1% in 2025 to 261.1 billion tokens and 59.1% in the first six months of 2026. GLM held second place with 91.2 billion tokens, representing 20.7% of total consumption.

DeepSeek, which ranked third in 2025, was overtaken by the Kimi family. Models from Kimi processed 81.4 billion tokens and captured 18.4% of usage. The rapid pace of the Chinese LLM race means that last year’s frontrunner can quickly fall outside the top three.

The statistics are drawn from MWS GPT Model Hub and MWS GPT platforms, whose primary clients are large enterprises. Businesses deploy these models for chatbots, personalized advertising, mass email campaigns, product descriptions, and analysis of customer reviews and inquiries. In practice, companies assign LLMs tasks that must run continuously, at high speed, and without typical human limitations.

MWS Cloud estimates that the entire Russian LLM market will expand by 35% in 2026, reaching 19.6 billion rubles. The cloud segment, which includes SaaS and API access to models, is expected to approach 1.5 billion rubles. In response to rising demand, MWS Cloud expanded its Model Hub catalog nearly twofold to 17 models. New additions include GLM 5.2, Kimi K2.6, Qwen3.6, Gemma 4, GPT OSS, as well as speech recognition and synthesis tools and rerankers for search systems and RAG pipelines. All services are available through a single OpenAI-compatible API.

The volume of tokens processed indicates that Russian enterprises have moved beyond experimentation and are now embedding Chinese LLMs into core operational processes, with demand continuing to outpace catalog updates.

Related articles

AntiMalware•Other

Molniya Messenger Debuts in RuStore as Paid Alternative with End-to-End Encryption

Russian company Red Soft and Chinese partner Passion Tech have released the Molniya messenger on the RuStore platform. The Android application requires a one-time payment of 750 rubles with no additional in-app purchases. Key features include personal and group chats, audio and video calls, channels, a social feed, and short videos, all protected by default end-to-end encryption. Users can send files up to 4 GB, organize up to 30 chat folders, pin 15 conversations or channels, and subscribe to as many as 1,000 channels. The developers aim to reach 15 million users within 18 months after launch. The project was originally scheduled for early 2026 but became available earlier than planned.

AntiMalware•Other

Enthusiasts Bring Xbox Cloud Gaming and Native Windows Titles to PlayStation 5 via Homebrew

Homebrew developers have created two separate projects that expand the capabilities of modified PlayStation 5 consoles. The first project, PSBox Cloud Gaming by RafaelNGP, turns the console into a client for Microsoft’s Xbox Cloud Gaming service, streaming games at 1080p and 60 frames per second while supporting full DualSense features. The second project, prospero-win, uses Wine and compatibility layers to run Windows games locally on the PS5 hardware. Reported performance includes Half-Life 2 at high settings and 60 FPS, GTA IV at approximately 55 FPS in open-world areas at 1080p, and older titles such as Counter-Strike 1.6 and Warcraft III exceeding 60 FPS. Both projects require a console capable of running unofficial software and, for cloud gaming, a Game Pass Ultimate subscription for most of the library. The work remains experimental and depends on individual game compatibility.

Habr•Other

Yandex Data Center Attacks Trigger Outages, Cloud Disruptions and Stock Decline

A series of physical attacks has disabled or partially damaged multiple Yandex data centers in Russia, leading to prolonged service outages across cloud and consumer platforms. Fires and power failures struck facilities in Sasovo, Kaluga and Vladimir between 8 and 11 October, forcing the company to shift workloads to the remaining Mytishchi site. Analysts from Finam, Rikom-Trust and Freedom Global note that recovery timelines now stretch from several months to two years for specialized hardware such as supercomputers. The incidents have already erased nearly 9 percent of Yandex share value and raised concerns over future capital expenditure, client retention in Yandex Cloud and potential sanctions complications for overseas expansion. Experts emphasize that the attacks have moved from isolated technical failures to a systemic business-continuity and investment-risk issue.

AntiMalware•Other

Cyber Attack on Danfoss Systems Forces Defrost in 250 French Supermarkets, Spoiling Stock

Hackers compromised refrigeration control systems supplied by Danfoss in French supermarket chains Intermarché and Coopérative U, activating continuous defrost cycles that raised temperatures to 50 °C. The sabotage affected between 150 and 200 Intermarché stores and nearly 100 Coopérative U locations, forcing retailers to discard large quantities of fresh and frozen goods. French authorities confirmed the incidents, with the Paris prosecutor’s office opening an investigation after reports of associated fires. The attackers exploited the normal maintenance function of the Danfoss equipment, turning brief defrost cycles into prolonged warming that broke the cold chain. Coopérative U chairman Dominique Schelcher described the event as unprecedented and stated that technical teams are working with refrigeration specialists to restore operations. No group has claimed responsibility, and investigators continue to examine the initial access vector. The incident illustrates how manipulation of industrial control systems can produce immediate physical and financial damage without traditional data theft or encryption.