Securing Oil and Gas OT Operations in 2026
Summary: Dragos elevated VOLTZITE to a Stage 2 threat group after it compromised cellular gateways across U.S. midstream oil and gas operations in 2025, then pivoted to engineering workstations to dump configuration files and alarm data. A newly designated Stage 2 group, AZURITE, targets oil and gas engineering workstations to exfiltrate alarm data, configuration files, process information, and operator credentials, though it has not been observed disrupting operations.
What's compelling: Oil and gas led all sectors in malware protection and detection gaps at 37 percent of findings, and in 13 percent of 2025 Dragos incident response cases malware ran silently without triggering a single alert.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026