Traversing the 2023 Operational Technology Cyber Threat Landscape
Summary: Dragos' 2023 OT threat review describes ELECTRUM running destructive wiper attacks on Ukrainian critical infrastructure, including a January 2023 attack on telecom Kyivstar, and the emergence of three new threat groups: GANANITE, VOLTZITE, and LAURIONITE. VOLTZITE, which overlaps with Volt Typhoon, has been observed only at Stage 1 of the ICS Cyber Kill Chain, conducting long-term reconnaissance of U.S. electric and telecommunications entities and exfiltrating data such as SCADA, historian, and GIS data where IT-OT segmentation is absent.
What's compelling: A five-country government fact sheet cited here warns that these actors are pre-positioning on IT networks for disruptive or destructive activity against U.S. critical infrastructure in the event of a major crisis or conflict. VOLTZITE has not yet shown the capability to disrupt OT assets, which means the segmentation between your IT and OT networks is the control standing between reconnaissance and SCADA data leaving your environment.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026