ICS STRIVE provides information on Threats, Vulnerabilities and Incidents in the manufacturing automation sector.Security Remains Everybody’s JobOT Threat Report: Physical Impacts Down, Nation-State Attacks on Rise2025 OT Cyber Threat Report2024 Threat ReportNext Filter by: Country AfricaAlbaniaAngolaArgentinaAsia-PacificAustraliaAustriaAzerbaijanBangladeshBelarusBelgiumBermudaBoliviaBosnia and HerzegovinaBrazilBritish Virgin IslandsBulgariaBurkina FasoCameroonCanadaChadChileChinaColombiaCosta RicaCroatiaCubaCuraçaoCzech RepublicDenmarkDominican RepublicEcuadorEgyptEl SalvadorEstoniaEuropeFinlandFranceGermanyGhanaGlobalGreeceGuadeloupeGuamGuatemalaGuyanaHondurasHong KongHungaryIcelandIndiaIndonesiaIranIrelandIsraelItalyJapanJordanKenyaKoreaLatviaLebanonLetlandLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacedonia (Rep. of N.)MalaysiaMaltaMartiniqueMexicoMiddle EastNamibiaNepalNetherlandsNew ZealandNicaraguaNigeriaNorwayPakistanParaguayPeruPhilippinesPolandPortugalQatarReunion IslandRomaniaRussiaRussian FederationSaudi ArabiaSenegalSingaporeSlovakiaSloveniaSouth AfricaSouth AmericaSouth KoreaSpainSri LankaSt. MaartenSwedenSwitzerlandTaiwanThailandThe PhilippinesTrinidad & TobagoTurkeyUkraineUnited Arab EmiratesUnited KingdomUnited Kingdom of Britain & Northern IrelandUnited StatesUnknownVanuatuVenezuelaVietnam Industry AerospaceAutomotiveBiotechBuilding AutomationBusinessChemicalsCloud ProviderCommunicationsDefenseEnergy (Includes Power and Utilities)Engineering (Includes Industrial Construction)Food & BeverageGovernmentHealthcareInsuranceManufacturingMetalsMetals & MiningMiningOil & GasOtherPackagingPharmaceuticalPulp & PaperService ProviderSoftwareSteelTechnologyTransportation (Includes Logistics, Shipping, Maritime, Rail, Trucking)UnknownWater and Waste Water Threat Actor 8Base Ransomware GroupAiLock ransomware groupAkira Ransomware GangAndarielAnonymousAnonymous RoughSecAnonymous SudanAnubis Ransomware GroupAPT28AuroraBarracudaBelarusian CyberpartisansBianLian Ransomware GroupBl00dy 'bloody' Ransomware GangBlack Basta GroupBlack RewardBlack VineBlackByteBlackCat / ALPHVBlackjack groupBlackMatterBlackShrantacBlackSuitBlue LockerBrain CipherCactus ransomware gangCentral Scientific Research Institute of Chemistry and Mechanics (CNIIHM), RussiaCerber ransomware operationCicada3301 ransomware groupClop (or Cl0p) ransomware gangCold RiverConti groupCutting Sword of JusticeCyber Av3ngersCyber-PartisansDaixin TeamDark AngelsDarkSideDesordenDirewolfDoppelPaymer Ransomware GangDragonforceDunghill ransomware gangEmbargo Ransomware GangEverest Ransomware GroupFIN11Former EmployeeFulcrumSecGold DupontGunraHackers of Ukraine's military intelligence agency (HUR)HandalaHellcat ransomware gangHive Ransomware GroupINC RansomIndian Cyber Force (ICF)IndraIndustrial SpyInterlockIranIsrealIT Army of UkraineJoseph AtkinsKawa4096Killmilk/Just EvilKillnetKimsukyLapsus$LazarusLockBitLorenz ransomware gangLVLynx Ransomware GroupMedusaMoney Message ransomware gangMONTIMount LockerMysterious Team BangladeshNation State ActorNefilim Ransomware groupNempty Ransomware groupNetwalker GroupNevada Ransomware OperationNitrogenNobelium hacking groupNoEscape ransomware gangNoName057(16)PandoraPayloadPhoenixPlay, aka PlayCryptPredatory SparrowQilinRA WorldRagnar LockerRagnarok GroupRansomexxRansomHouse Extortion GroupRansomHub RaaSREvilRhysida Ransomware GroupRoyal Ransomware gangRussiaRussian Main Intelligence Directorate (GRU)Russian Security ServicesRyuk ransomware gangSafePay Ransomware GroupSalt TyphoonSandwormSarcoma GroupScatter Swine / 0ktapusScattered Lapsus$ HuntersScattered SpiderShinyHuntersSilent CrowSnatch ransomware groupSTIBNITESticky WerewolfStormStormous ransomware groupTeam Insane PKTeam OneFistTermiteThe GentlemenThe Hades ransomware gangTheUSERS007TimisoaraHackerTeam (THT)TrigonaUkrainian Cyber AllianceUNC2546UnconfirmedUnited StatesUnknownVexyVice SocietyVolt TyphoonWarlock Ransomware GroupWinntiWizard SpiderWorld Leaks, formerly Hunters InternationalWyatt A. TravnichekYanluowang ransomware groupZeroXZestix ImpactsOT (Operational Technology)IT (Information Technology)SafetyPrivacyBOTH OT and ITSearch Incidents: Recycling, Mining Provider, Tomra, Hit in ‘Extensive’ Attack07/16/2023 TomraNo Malware identifiedNo threat source identified ITNorwayRansomware Attack Shuts Down Operations at German Manufacturer Wildeboer07/14/2023 WildeboerNo Malware identifiedNo threat source identifiedOT ITGermanyAustralian Infrastructure Services Provider Takes Down Systems07/08/2023 Ventia UnknownNo threat source identified ITAustraliaRussian Medical Lab Helix Hit by Ransomware Attack07/08/2023 Helix LaboratoryNo Malware identifiedNo threat source identified ITRussiaRussian RZD Railway Cyberattack Disrupts Online Ticket Sales07/05/2023 RZD railway companyNo Malware identifiedNo threat source identified ITRussiaContainer Processing Halted at The Port of Nagoya07/04/2023 Toyota Motor Corporation Nagoya Port AuthorityNo Malware identified LockBitOT ITJapanOperations Disrupted at Montpellier Airport after Weekend Cyberattack07/02/2023 Montpellier AirportNo Malware identifiedNo threat source identifiedOT ITFranceAON MOVEit Hack affects Dublin Airport Staff Data07/01/2023 AONNo Malware identified Clop (or Cl0p) ransomware gang ITIrelandSatellite Communications System Serving the Russian military Knocked Offline06/30/2023 Dozor-TeleportNo Malware identifiedNo threat source identified ITRussiaGerman Milk Producer Affected by Cyberattack06/30/2023 SCHWÄLBCHENNo Malware identifiedNo threat source identified ITGermanyConfusion About $70M Ransom Demand: Kinmax or TSMC ?06/29/2023 Kinmax TechnologyNo Malware identified LockBit ITTaiwanLockbit Demands $70M of TSMC Chipmaking Giant06/28/2023 TSMC (Taiwan Semiconductor Manufacturing Company)No Malware identified LockBit ITTaiwanSiemens Energy AG Confirms Ransomware Attack06/27/2023 Siemens Energy AGNo Malware identified Clop (or Cl0p) ransomware gang ITGermanyGlobalSuncor Suffers Cyber Attack, Hurts Retail Operations06/23/2023 SuncorNo Malware identifiedNo threat source identified ITCanadaOR Luxury Recreational Vehicle Maker Hit In Cyberattack06/22/2023 Marathon Coach, Inc.No Malware identifiedNo threat source identified ITUnited StatesFirst Merchant Bank also Confirmed Databreach as Result of MOVEit Hacks06/21/2023 First Merchants BankNo Malware identified Clop (or Cl0p) ransomware gang ITUnited StatesDDoS Attack Took Down the North Sea Port Website06/20/2023 North Sea Port DDoS Attack NoName057(16) ITBelgiumNetherlandsCyberattack hits Multiple Sites of Pharmaceutical Vibrac Group06/19/2023 VibracNo Malware identifiedNo threat source identified ITFranceShell Investigates Ransomware Attack by the Cl0p Group06/16/2023 Royal Dutch ShellNo Malware identified Clop (or Cl0p) ransomware gang ITUnited KingdomCyberattack Causes Widespread Operational Disruption at Rheinische Post Mediagruppe06/16/2023 Rheinische Post Mediengruppe GmbHNo Malware identifiedNo threat source identifiedOT ITGermany123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102
