Dragos Industrial Ransomware Analysis: Q2 2022
Summary: Dragos tracked 125 ransomware incidents against industrial organizations in Q2 2022, down from 158 the prior quarter, with only 23 of the 43 groups it monitors active; Lockbit 2.0 accounted for 33 percent of attacks, Conti 13 percent, and new group Black Basta 12 percent. Lockbit 2.0 encrypted over 1,200 servers at a Foxconn factory in Mexico in May, halting operations for a couple of weeks, while Conti shut down in mid-May two weeks after the U.S. State Department announced rewards for information on its leadership.
Why it matters: Conti's exit did not shrink the threat: Black Basta, reportedly run by former Conti and REvil members, halted AGCO's operations for weeks, and 69 percent of tracked attacks hit 42 manufacturing subsectors whose outages propagate to aerospace, food and beverage, and automotive supply chains.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026