Publications

29 January 2025

Kaspersky ICS CERT analyzes industrial threat trends and makes forecasts on how the industrial threat landscape will look in 2025.

• APT,
• artificial Intelligence,
• quantum computing,
• vendors

26 December 2024

During the quarter, a number of research papers and technical advisories were published detailing attacks that either targeted or affected organizations in the industrial sector. From our perspective, the following are likely to be the most interesting for researchers and useful for cybersecurity practitioners

• APT,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased from the second quarter to 22%. But the figure increased in Africa, South Asia, South-East Asia, the Middle East, Latin America, and East Asia. Regionally, the percentage ranged from 9.7% in Northern Europe to 31.5% in Africa.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased by 1.5 pp from the second quarter to 22%. The biometrics sector led the surveyed industries in terms of this parameter.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

21 November 2024

The global percentage of ICS computers on which malicious objects were blocked decreased from Q1 2024 to 23.5%. But the figure increased in four regions. Regionally, the percentage ranged from 11.3% in Northern Europe to 30% in Africa.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• malware,
• phishing,
• ransomware,
• spyware,
• statistics

08 November 2024

A total of 35 incidents were confirmed by victims. Half of the attacks reportedly resulted in the denial of IT systems and the denial of operations. There is a case of a company that was unable to recover from the impact of a cyberattack and decided to cease operations.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of service,
• denial of shipment,
• electronics industry,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• pharmaceutical,
• ransomware,
• transportation,
• utilities

03 October 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises that were disclosed in Q2 2024, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• buildings automation,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

26 September 2024

In the second quarter of 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.9 pp from the previous quarter to 23.5%. Compared to the second quarter of 2023, the percentage decreased by 3.3 pp.

• buildings automation,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

13 June 2024

In the course of the modem security analysis, we found seven locally exploited vulnerabilities and one remotely exploited vulnerability. The combination of these vulnerabilities could allow an attacker to completely get control over the modem.

• automotive,
• Centurion,
• HSPA,
• Java,
• network equipment,
• Telit,
• UMTS,
• vulnerabilities

10 June 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• 0-day,
• adversary-in-the-middle,
• APT,
• Cloud Atlas/Inception,
• living-off-the-land,
• Sofacy,
• Volt Typhoon,
• vulnerabilities