Dragos Industrial Ransomware Analysis: Q2 2024
Summary: Dragos reports that ransomware incidents against industrial organizations almost doubled from Q1 to Q2 2024, with 29 of the 86 known industrial-targeting ransomware groups active in the second quarter versus 22 in the first. LockBit accounted for roughly 21 percent (66 incidents) of observed events and Play about 10 percent (31 incidents), while rebranded groups BlackSuit (formerly Royal) and RansomHub (formerly Knight) emerged with more sophisticated encryption and lateral movement tactics.
Why it matters: Dragos found no ransomware attacks directly targeting ICS or OT processes, yet disruptions still reached OT networks through IT/OT interdependencies - so the near-doubling of incidents lands on industrial operators whose process safety depends on systems they never saw attacked.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026