Publications

26 June 2025

The attack on Kuala Lumpur airport, which knocked out many of its information systems for 10 hours, plus over 100 more incidents.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of service,
• electronics industry,
• energy sector,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• ransomware,
• textile,
• transportation,
• utilities

10 June 2025

The internet ranks first among threat sources in all regions. The problem is particularly relevant to Africa, South-East Asia, South Asia and Russia.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

17 March 2025

The percentage of ICS computers on which malicious objects were blocked increased in eight regions. Regionally, the percentage ranged from 10.6% in Northern Europe to 31.0% in Africa.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

17 March 2025

The percentage of ICS computers on which malicious scripts and phishing pages as well as ransomware were blocked continued to increase.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

19 February 2025

Many large companies, including some well-known brands, affected by cyberattacks. An unusually high number of victims were in critical sectors such as utilities and power and energy.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of service,
• electronics industry,
• energy sector,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• ransomware,
• retail,
• textile,
• transportation,
• utilities

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased from the second quarter to 22%. But the figure increased in Africa, South Asia, South-East Asia, the Middle East, Latin America, and East Asia. Regionally, the percentage ranged from 9.7% in Northern Europe to 31.5% in Africa.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased by 1.5 pp from the second quarter to 22%. The biometrics sector led the surveyed industries in terms of this parameter.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

08 November 2024

A total of 35 incidents were confirmed by victims. Half of the attacks reportedly resulted in the denial of IT systems and the denial of operations. There is a case of a company that was unable to recover from the impact of a cyberattack and decided to cease operations.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of service,
• denial of shipment,
• electronics industry,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• pharmaceutical,
• ransomware,
• transportation,
• utilities

11 April 2024

In this overview, we discuss cybercriminal and hacktivist attacks on industrial organizations.

• 0-day,
• abuse of IT services,
• aerospace,
• automotive,
• construction,
• data leakage,
• data loss,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of shipment,
• electronics industry,
• energy sector,
• food & beverage,
• hacktivists,
• ICS engineering,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• MOVEit MFT,
• network equipment,
• oil & gas,
• personal data leakage,
• ransomware,
• shipbuilding,
• supply chain,
• transportation,
• unitronics,
• utilities,
• water supply

19 January 2022

Targets of spyware attacks in which each malware sample has a limited-scope and a short lifetime include industrial enterprises. Victim organizations’ SMTP services are abused to send phishing emails and collect stolen data.

• automotive,
• business email compromise,
• construction,
• energy sector,
• food & beverage,
• healthcare,
• ICS engineering,
• ICS integration,
• logistics,
• manufacturing,
• oil & gas,
• pharmaceutical,
• phishing,
• SMTP,
• spyware,
• transportation,
• utilities,
• waste recycling