11 September 2025
Threat landscape for industrial automation systems. Q2 2025
The percentage of ICS computers on which denylisted internet resources were blocked increased in all regions. This growth is associated with the addition of direct links to malicious code hosted on popular public websites and file services.
10 September 2025
Dynamics of external and internal threats to industrial control systems. Q2 2025
A segmentation of the attacked ICS computers into categories based on the malware blocked and the sources of its entry which helps to understand the ICS threat landscape better and identify the factors that affect it.
10 June 2025
Threat landscape for industrial automation systems. Regions, Q1 2025
The internet ranks first among threat sources in all regions. The problem is particularly relevant to Africa, South-East Asia, South Asia and Russia.
05 June 2025
TTPs of Cyber Partisans activity aimed at espionage and disruption
Kaspersky ICS CERT experts managed to find and analyze the malware and utilities most probably used by the actors. The key finding was a previously unknown backdoor.
15 May 2025
Threat landscape for industrial automation systems. Q1 2025
The percentage of ICS computers on which various types of malware spread via the internet and email were blocked increased for the first time in two years.
17 March 2025
Threat landscape for industrial automation systems. Regions, Q4 2024
The percentage of ICS computers on which malicious objects were blocked increased in eight regions. Regionally, the percentage ranged from 10.6% in Northern Europe to 31.0% in Africa.
17 March 2025
Threat landscape for industrial automation systems. Q4 2024
The percentage of ICS computers on which malicious scripts and phishing pages as well as ransomware were blocked continued to increase.
24 February 2025
Operation SalmonSlalom
Kaspersky discovered a new attack targeting industrial organizations in APAC
25 December 2024
Threat landscape for industrial automation systems. Regions, Q3 2024
The percentage of ICS computers on which malicious objects were blocked decreased from the second quarter to 22%. But the figure increased in Africa, South Asia, South-East Asia, the Middle East, Latin America, and East Asia. Regionally, the percentage ranged from 9.7% in Northern Europe to 31.5% in Africa.
25 December 2024
Threat landscape for industrial automation systems. Q3 2024
The percentage of ICS computers on which malicious objects were blocked decreased by 1.5 pp from the second quarter to 22%. The biometrics sector led the surveyed industries in terms of this parameter.