Dragos ICS/OT Ransomware Analysis: Q1 2022
Summary: Dragos tracked ransomware attacks on industrial organizations in Q1 2022 and found that while the number of attacks and dark web postings was slightly lower than in Q4 2021, the impacts were larger, with 75 percent of tracked attacks hitting the manufacturing sector and 81 percent targeting Europe and North America. Conti accounted for 27 percent of attacks and Lockbit 2.0 for 26 percent, and a February 2022 Conti-related attack on Toyota supplier Kojima Industries suspended Toyota plant operations for several days.
Why it matters: Only 22 of the 37 ransomware groups Dragos monitors were active in Q1 2022, yet two of them - Conti and Lockbit 2.0 - carried more than half of the tracked attacks, and a single hit on one Toyota parts supplier stopped production for days.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026