Dragos Reports OT/ICS Cyber Threats Escalate Amid Geopolitical Conflicts and Increasing Ransomware Attacks
Summary: Dragos released its 8th Annual Year in Review on February 25, 2025, reporting ransomware activity against industrial organizations up more than 87% over the prior year and naming two new OT threat groups, GRAPHITE and BAUXITE. Dragos now tracks 23 threat groups worldwide, 9 of which were active in OT operations in 2024, alongside ongoing VOLTZITE infiltration and new malware families built specifically for OT environments such as FrostyGoop.
What you should know: Dragos states that attackers like VOLTZITE are already inside networks, and that state-sponsored groups are hiding in critical infrastructure while criminal groups exploit known vulnerabilities, weak remote access configurations, and exposed OT assets - with a lack of OT visibility concealing the full scope of these attacks.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026