Dragos Industrial Ransomware Analysis: Q4 2024
Summary: Dragos's Q4 2024 analysis found ransomware groups refining techniques, forming new alliances, and exploiting newly disclosed vulnerabilities in Veeam Backup & Replication and Cleo Managed File Transfer to gain initial access to industrial organizations. Dragos identified no new ICS-specific ransomware variants in the quarter, but reported 424 manufacturing incidents and disruptions across water treatment, energy distribution, and manufacturing as victims took IT infrastructure offline.
What's compelling: Dragos assesses with low confidence that ransomware-as-a-service platforms let financially, ideologically, or politically motivated adversaries pursue espionage and sabotage, and the collaborations it describes - BianLian with RansomHub, nation-state actors openly aligned with ransomware operators - mean the group that extorts you may not be the only one inside your network.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026