Woburn, MA – September 13, 2023 — Malicious objects of all types were detected and blocked on 34 percent of Industrial Control System (ICS) computers in the first half of 2023, according to the ICS CERT landscape report by Kaspersky. The second quarter of 2023 saw the highest quarterly level of threats globally since 2019, with 26.8 percent of ICS computers affected.
In the first half of 2023, Kaspersky's security solutions blocked 11,727 different malware families in industrial systems. Out of all categories, only one showed growth in H1 2023: denylisted internet resources (11.3%). This marks the second consecutive half-year of increased threat activity in this category. Denylisted internet resources were the leading threat category until 2022 when they were overtaken by malicious scripts and phishing pages. These elements remain the most prevalent threats (12.7%), although their percentages have been increasingly converging.
In
H1 2023, traditionally safer regions experienced unexpected shifts. Australia
and New Zealand, the United States and Canada, Western Europe, and Northern Europe,
typically characterized by lower threat levels, witnessed increases in attacked
ICS computers proportions during this time period.
Despite these increases, it's crucial to emphasize that these regions still maintain relatively low threat percentages when compared to others. The rise in threats can be primarily attributed to the blocking of denylisted internet resources and malicious scripts, commonly delivered via the internet and email. Additionally, spyware detection showed considerable growth in these areas.
Building automation remained the industry most exposed to cyber threats, accounting for 38.5 percent of computers attacked. However, the energy, oil and gas industries experienced opposite trends since 2021. Energy saw an increase of 36 percent in threats, while the oil and gas sector experienced a decrease, accounting for 30.8 percent.
In addition, engineering, ICS integration, manufacture, and energy sectors showed an overall increase in the percentage of ICS computers on which malicious objects were blocked in H1 2023.
“For industrial enterprises, cybersecurity is now about safeguarding investments and ensuring the resilience of key assets,” said Evgeny Goncharov, head of Kaspersky ICS CERT. “The findings from our analysis of attacks on the industrial sector reveal crucial insights into evolving threat landscapes in various industries. By understanding these risks, organizations can make informed decisions, allocate resources wisely, and efficiently fortify their defenses. In doing so, they not only protect their bottom line but also contribute to a safer and more secure digital ecosystem for all.”
Read more about the ICS threat landscape in H1 2023 on the Kaspersky ICS CERT website.
To keep your OT computers protected from various threats, Kaspersky experts recommend:
About Kaspersky
Kaspersky is a global cybersecurity and digital privacy company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection, specialized security products and services, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help over 220,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.
Media Contact:
Cassandra Faro
Cassandra.Faro@Kaspersky.com
781-503-1812