Kaspersky ICS CERT

Report

Threat landscape for industrial automation systems. Statistics for H1 2023

The percentage of ICS computers attacked globally was 34%. The percentage for different countries was in the range from 53.3% to 7.4%.

Blog

Why APTs are so successful – stories from IR trenches

Common TTPs of attacks against industrial organizations. Implants for remote access

The secrets of Schneider Electric’s UMAS protocol

Report

Targeted attack on industrial enterprises and public institutions

Report an incident

Reports All

Threat landscape for industrial automation systems. Statistics for H1 2023

The statistical data presented in the report was received from ICS computers protected by Kaspersky products that Kaspersky ICS CERT categorizes as part of the industrial infrastructure at organizations.

13 September 2023

Common TTPs of attacks against industrial organizations. Implants for uploading data

In this part we present information on the four types of implants and two tools used during the last (third) stage of the attacks discovered.

10 August 2023

Common TTPs of attacks against industrial organizations. Implants for gathering data

This part of the research is devoted to second stage malware used to gather data on infected systems of industrial organizations.

31 July 2023

More reports

Advisories All

KLCERT-22-046: WAGO 750 Controllers. Denial of service of the FTP server

12 October 2022

KLCERT-21-007: Schneider Electric EcoStruxure Control Expert / Process Expert, SCADAPack RemoteConnect for x70. Information leak from project file

20 May 2022

KLCERT-20-061 / KLCERT-20-068: Schneider Electric Modicon M340/M580 Authentication Bypass by Spoofing

20 May 2022

More advisories

Blog All

Why APTs are so successful – stories from IR trenches

30 May 2023

Unusual penetration techniques – in the wild and in Red Team research

12 December 2022

Draft of the NIST Guide #800-82 – what has changed

24 May 2022

More blog

Kaspersky ICS CERT provides unique services in the area of industrial automation system and internet-of-things cybersecurity

Stay Informed

Keep up to date on threats and risks relevant to your organization

Get Ready

Empower your workforce with cybersecurity knowledge

Respond

Expert handling of security incidents using our professional services

Transform

Rethink your approach to cybersecurity from the ground up

More services

Events All

Kaspersky ICS CERT experts participate in conferences and conduct training courses, seminars, workshops, and CTF contests

Reports All

Advisories All

Blog All

Services All

Events All