Publications

04 September 2025

Spreading from a compromised organization to its peers with hijacked emails, using the ClickFix social engineering method – non-trivial tactics and techniques were reported this quarter.

• 0-day,
• APT,
• cyberespionage,
• phishing,
• ransomware,
• spyware,
• vulnerabilities

10 June 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• 0-day,
• adversary-in-the-middle,
• APT,
• Cloud Atlas/Inception,
• living-off-the-land,
• Sofacy,
• Volt Typhoon,
• vulnerabilities

11 April 2024

In this overview, we discuss cybercriminal and hacktivist attacks on industrial organizations.

• 0-day,
• abuse of IT services,
• aerospace,
• automotive,
• construction,
• data leakage,
• data loss,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of shipment,
• electronics industry,
• energy sector,
• food & beverage,
• hacktivists,
• ICS engineering,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• MOVEit MFT,
• network equipment,
• oil & gas,
• personal data leakage,
• ransomware,
• shipbuilding,
• supply chain,
• transportation,
• unitronics,
• utilities,
• water supply

05 October 2023

In this overview, we discuss cybercriminal and hacktivist attacks on industrial organizations.

• 0-day,
• automotive,
• data leakage,
• data loss,
• electronics industry,
• energy sector,
• food & beverage,
• hacktivists,
• ICS engineering,
• industrial automation,
• irrigation,
• logistics,
• manufacturing,
• metallurgy,
• military-defense,
• mining,
• MOVEit MFT,
• oil & gas,
• pharmaceutical,
• phishing,
• ransomware,
• robotics,
• transportation,
• utilities,
• waste recycling