Publications

03 October 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises that were disclosed in Q2 2024, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• APT overview,
• buildings automation,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

26 September 2024

In the second quarter of 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.9 pp from the previous quarter to 23.5%. Compared to the second quarter of 2023, the percentage decreased by 3.3 pp.

• buildings automation,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

27 May 2024

In the first quarter of 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.3 pp from the previous quarter to 21.4%. Compared to the first quarter of 2023, the percentage decreased by 1.3 pp.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• malware,
• manufacturing,
• miners,
• oil & gas,
• phishing,
• ransomware,
• spyware,
• statistics

27 May 2024

The percentage of ICS computers on which malicious objects were blocked during the quarter varied regionally from 34.2% in Africa to 11.5% in Northern Europe. Africa and South-East Asia saw their percentages increase from the previous quarter.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• malware,
• manufacturing,
• miners,
• oil & gas,
• phishing,
• ransomware,
• spyware,
• statistics

19 March 2024

The statistical data presented in the report was received from ICS computers protected by Kaspersky products that Kaspersky ICS CERT categorizes as part of the industrial infrastructure at organizations.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• industrial cybersecurity,
• manufacturing,
• miners,
• oil & gas,
• ransomware,
• statistics

13 September 2023

The statistical data presented in the report was received from ICS computers protected by Kaspersky products that Kaspersky ICS CERT categorizes as part of the industrial infrastructure at organizations.

• automotive,
• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• manufacturing,
• miners,
• oil & gas,
• ransomware,
• spyware,
• statistics

08 September 2022

The statistical data presented in the report was received from ICS computers protected by Kaspersky products that Kaspersky ICS CERT categorizes as part of the industrial infrastructure at organizations.

• automotive,
• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• manufacturing,
• miners,
• oil & gas,
• ransomware,
• spyware,
• statistics

27 June 2022

A previously unknown Chinese-speaking threat actor attacking telecommunications, manufacturing, and transport organizations in several Asian countries. The group exploits MS Exchange vulnerability to deploy ShadowPad malware and infiltrates building automation systems of one of the victims.

• APT,
• buildings automation,
• manufacturing,
• ShadowPad,
• transportation

16 December 2021

Kaspersky products blocked PseudoManuscrypt on more than 35,000 computers in 195 countries of the world. Targets of attacks include a significant number of industrial and government organizations, including enterprises in the military-industrial complex and research laboratories.

• APT,
• buildings automation,
• cyberespionage,
• ICS engineering,
• Lazarus,
• Manuscrypt,
• PseudoManuscrypt

19 September 2019

What threats are relevant to building automation systems and what malware their owners have encountered in the first six months of 2019.

• buildings automation,
• statistics