Kaspersky ICS CERT

Report

Threat landscape for industrial automation systems. Q1 2025

The percentage of ICS computers on which various types of malware spread via the internet and email were blocked increased for the first time in two years.

Blog

Why APTs are so successful – stories from IR trenches

TTPs of Cyber Partisans activity aimed at espionage and disruption

Operation SalmonSlalom

Report

Targeted attack on industrial enterprises and public institutions

Report an incident

Reports All

TTPs of Cyber Partisans activity aimed at espionage and disruption

Kaspersky ICS CERT experts managed to find and analyze the malware and utilities most probably used by the actors. The key finding was a previously unknown backdoor.

05 June 2025

Threat landscape for industrial automation systems. Q1 2025

The percentage of ICS computers on which various types of malware spread via the internet and email were blocked increased for the first time in two years.

15 May 2025

A brief overview of the main incidents in industrial cybersecurity. Q4 2024

More than 100 companies publicly reported cyberattacks. Two of them announced their insolvency after the incident. In two other cases, two ransomware gangs simultaneously claimed responsibility for the same hack.

08 April 2025

More reports