Publications

11 September 2025

The percentage of ICS computers on which denylisted internet resources were blocked increased in all regions. This growth is associated with the addition of direct links to malicious code hosted on popular public websites and file services.

• ICS security,
• malware,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

10 September 2025

A segmentation of the attacked ICS computers into categories based on the malware blocked and the sources of its entry which helps to understand the ICS threat landscape better and identify the factors that affect it.

• ICS security,
• malware,
• statistics

19 June 2025

Using polyglot files, involving the 7-Zip vulnerability and the 0-click vulnerability in MS Windows – there are some interesting details of attacks on industrial enterprises disclosed at this quarter.

• APT,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

10 June 2025

The internet ranks first among threat sources in all regions. The problem is particularly relevant to Africa, South-East Asia, South Asia and Russia.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

15 May 2025

The percentage of ICS computers on which various types of malware spread via the internet and email were blocked increased for the first time in two years.

• ICS security,
• malware,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

25 March 2025

Abusing of Telegram to spy and put pressure on their victims’ employees, notifying the victims by printing messages on printers connected to a compromised network – we publish interesting details of attacks on industrial enterprises disclosed at this quarter.

• APT,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

17 March 2025

The percentage of ICS computers on which malicious objects were blocked increased in eight regions. Regionally, the percentage ranged from 10.6% in Northern Europe to 31.0% in Africa.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

17 March 2025

The percentage of ICS computers on which malicious scripts and phishing pages as well as ransomware were blocked continued to increase.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

26 December 2024

During the quarter, a number of research papers and technical advisories were published detailing attacks that either targeted or affected organizations in the industrial sector. From our perspective, the following are likely to be the most interesting for researchers and useful for cybersecurity practitioners

• APT,
• cyberespionage,
• mining,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased from the second quarter to 22%. But the figure increased in Africa, South Asia, South-East Asia, the Middle East, Latin America, and East Asia. Regionally, the percentage ranged from 9.7% in Northern Europe to 31.5% in Africa.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics