Publications

03 October 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises that were disclosed in Q2 2024, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• APT overview,
• buildings automation,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

26 September 2024

In the second quarter of 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.9 pp from the previous quarter to 23.5%. Compared to the second quarter of 2023, the percentage decreased by 3.3 pp.

• buildings automation,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

03 June 2024

A total of 30 incidents were confirmed by victims. 37% of victims reported denial of operations or product shipment caused by the incident. Almost half of all incidents resulted in disruption of the victims’ public digital services.

• automotive,
• cyberincidents overview,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of shipment,
• electronics industry,
• energy sector,
• food & beverage,
• logistics,
• manufacturing,
• mining,
• personal data leakage,
• ransomware,
• supply chain,
• transportation,
• utilities,
• water supply

27 May 2024

In the first quarter of 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.3 pp from the previous quarter to 21.4%. Compared to the first quarter of 2023, the percentage decreased by 1.3 pp.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• malware,
• manufacturing,
• miners,
• oil & gas,
• phishing,
• ransomware,
• spyware,
• statistics

27 May 2024

The percentage of ICS computers on which malicious objects were blocked during the quarter varied regionally from 34.2% in Africa to 11.5% in Northern Europe. Africa and South-East Asia saw their percentages increase from the previous quarter.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• malware,
• manufacturing,
• miners,
• oil & gas,
• phishing,
• ransomware,
• spyware,
• statistics

11 April 2024

In this overview, we discuss cybercriminal and hacktivist attacks on industrial organizations.

• 0-day,
• abuse of IT services,
• aerospace,
• automotive,
• construction,
• cyberincidents overview,
• data leakage,
• data loss,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of shipment,
• electronics industry,
• energy sector,
• food & beverage,
• hacktivists,
• ICS engineering,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• MOVEit MFT,
• network equipment,
• oil & gas,
• personal data leakage,
• ransomware,
• shipbuilding,
• supply chain,
• transportation,
• unitronics,
• utilities,
• water supply

19 March 2024

The statistical data presented in the report was received from ICS computers protected by Kaspersky products that Kaspersky ICS CERT categorizes as part of the industrial infrastructure at organizations.

• buildings automation,
• energy sector,
• ICS engineering,
• ICS integration,
• industrial cybersecurity,
• manufacturing,
• miners,
• oil & gas,
• ransomware,
• statistics

31 January 2024

Most of the described trends have been observed before. However, some of them have reached a critical mass of creeping changes, which could lead to a qualitative shift in the threat landscape

• automotive,
• hacktivists,
• logistics,
• ransomware,
• transportation

05 October 2023

In this overview, we discuss cybercriminal and hacktivist attacks on industrial organizations.

• 0-day,
• automotive,
• cyberincidents overview,
• data leakage,
• data loss,
• electronics industry,
• energy sector,
• food & beverage,
• hacktivists,
• ICS engineering,
• industrial automation,
• irrigation,
• logistics,
• manufacturing,
• metallurgy,
• military-defense,
• mining,
• MOVEit MFT,
• oil & gas,
• pharmaceutical,
• phishing,
• ransomware,
• robotics,
• transportation,
• utilities,
• waste recycling

25 September 2023

An overview of reports of APT and financial attacks on industrial enterprises, as well as related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities

• Andariel,
• APT,
• APT29,
• APT41,
• APT43,
• APT overview,
• CloudWizard,
• CommonMagic,
• Earth Longzhi,
• Kryptik,
• Lancefly,
• Lazarus,
• malware,
• MATA,
• Mint Sandstorm,
• PlugX,
• RA,
• ransomware,
• RomCom,
• Royal,
• Snake,
• Sofacy,
• Tortoiseshell,
• Vice Society,
• Volt Typhoon,
• YoroTrooper