Publications

01 December 2025

Using of AI, trusted relationships and historical security problems of traditional OS – there are some interesting details of attacks on industrial enterprises.

• 0-day,
• APT,
• APT overview,
• cyberespionage,
• phishing,
• ransomware,
• spyware,
• vulnerabilities

04 September 2025

Spreading from a compromised organization to its peers with hijacked emails, using the ClickFix social engineering method – non-trivial tactics and techniques were reported this quarter.

• 0-day,
• APT,
• APT overview,
• cyberespionage,
• phishing,
• ransomware,
• spyware,
• vulnerabilities

19 June 2025

Using polyglot files, involving the 7-Zip vulnerability and the 0-click vulnerability in MS Windows – there are some interesting details of attacks on industrial enterprises disclosed at this quarter.

• APT,
• APT overview,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

25 March 2025

Abusing of Telegram to spy and put pressure on their victims’ employees, notifying the victims by printing messages on printers connected to a compromised network – we publish interesting details of attacks on industrial enterprises disclosed at this quarter.

• APT,
• APT overview,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

29 January 2025

Kaspersky ICS CERT analyzes industrial threat trends and makes forecasts on how the industrial threat landscape will look in 2025.

• APT,
• artificial Intelligence,
• quantum computing,
• vendors

26 December 2024

During the quarter, a number of research papers and technical advisories were published detailing attacks that either targeted or affected organizations in the industrial sector. From our perspective, the following are likely to be the most interesting for researchers and useful for cybersecurity practitioners

• APT,
• APT overview,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased from the second quarter to 22%. But the figure increased in Africa, South Asia, South-East Asia, the Middle East, Latin America, and East Asia. Regionally, the percentage ranged from 9.7% in Northern Europe to 31.5% in Africa.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased by 1.5 pp from the second quarter to 22%. The biometrics sector led the surveyed industries in terms of this parameter.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

10 June 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• 0-day,
• adversary-in-the-middle,
• APT,
• APT overview,
• Cloud Atlas/Inception,
• living-off-the-land,
• Sofacy,
• Volt Typhoon,
• vulnerabilities

02 April 2024

An overview of reports of APT and financial attacks on industrial enterprises, as well as related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities

• APT,
• APT overview,
• CISA