Dragos Industrial Ransomware Analysis: Q3 2023
Summary: Dragos reported 231 ransomware incidents against industrial organizations in Q3 2023, down from 253 in Q2, with only 30 of the 72 groups that have historically attacked industrial organizations active in the quarter. Manufacturing accounted for 158 incidents, or 68.4 percent, and a July 2023 Lockbit attack on the Port of Nagoya's Unified Terminal System halted container operations across all terminals for several days at a port handling almost 10 percent of Japan's trade volume.
What's compelling: Dragos observed a 340 percent increase in Cl0p victims over the prior quarter, tied to the MOVEit zero-day, and estimates Cl0p will earn $75-100 million from that campaign - a return that makes unpatched and unknown vulnerabilities the preferred entry point for groups hitting industrial targets.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026