Dragos Industrial Ransomware Analysis: Q3 2022
Summary: Dragos tracked 128 ransomware incidents against industrial organizations in Q3 2022, up from 125 the prior quarter, with Lockbit 3.0 accounting for 35 percent (45 incidents) and manufacturing hit by 68 percent of attacks (88 incidents). Dragos observed 25 of the 48 ransomware groups it monitors as active in Q3, including new groups such as SPARTA BLOG, BIANLIAN, Donuts, ONYX, and YANLUOWANG, and noted an unknown person leaked the Lockbit 3.0 builder.
What's compelling: The Lockbit 3.0 builder is now loose, so the 45 incidents attributed to that strain are no longer the ceiling - anyone can produce their own version, and Dragos expects more new or reformed groups next quarter. With 88 of 128 incidents landing on manufacturing, the exposure runs straight into the aerospace, food and beverage, and automotive supply chains that depend on those plants.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026