Dragos Industrial Ransomware Attack Analysis: Q2 2023
Summary: Dragos tracked 253 ransomware incidents against industrial organizations in Q2 2023, an 18% increase over the prior quarter, with 33 of the 66 groups it monitors impacting industrial targets. Manufacturing absorbed 70% of alleged attacks (177 incidents), and Clop used new zero-day vulnerabilities in MOVEit Transfer against industrial vendors and oil and gas companies while BianLian used remote monitoring and management software such as AnyDisk.
Key Takeaway: Dragos assesses with moderate confidence that Q3 2023 will bring more business-impacting attacks on industrial organizations, citing Russian-aligned groups motivated by political tension with NATO and RaaS groups pivoting to larger targets as victims refuse to pay. The Port of Nagoya attack disrupted port operations and the Toyota packaging line, showing how far one industrial incident can travel through a supply chain.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026