How exposed to cyberattacks are Russian and Chinese companies,?
In Russia, the criminal gangs that are preying on US interests are both protected by and sanctioned by Vladimir Putin. If they were not, they would have already been arrested and jailed. It is beyond a reasonable doubt that in order to operate in Russia, they pay a fealty to Putin in return for their existence and continued operation, in other words, a percentage of the profits. I would suspect that Putin extracts 50% in exchange for immunity, and enforces a very strict set of bookkeeping rules and probably employs accountants to verify his cut. If he does, they stay out of jail; if he doesnt hes a sap. Putin sees his struggles for supremacy as a war and judges that alls fair in war including employing cyber warfare. Plus it has contributed to his likely being the worlds wealthiest individual. None of what comes out of Russia can or should be seen in isolation, as if these criminal gangs are simply flying under the radar. Not likely. They operate under sanctions. China is a different story. Its a vast country where all sorts of criminal behaviors go undetected. Though it is very unlikely that anything that passes over what passes for their version of the internet is likely to be monitored by and sanctioned by the government. In that regard, whatever cyber attacks originate in China are probably, equally sanctioned by the Chinese government and you can bet that money changes hands in order for those gangs to continue to operate. In the same way that a dog doesnt usually piss in its own bed, cyber criminals in Russia and China are very unlikely to target businesses within their own country. To do so would invite unwanted scrutiny resulting either in jail or higher fees by Putin or whoever profits in the case of China. It would be foolish, indeed to target businesses within their own borders.