ICS STRIVE provides information on Threats, Vulnerabilities and Incidents in the manufacturing automation sector.Security Remains Everybody’s JobOT Threat Report: Physical Impacts Down, Nation-State Attacks on Rise2025 OT Cyber Threat Report2024 Threat ReportNext Filter by: Country AfricaAlbaniaAngolaArgentinaAsia-PacificAustraliaAustriaAzerbaijanBangladeshBelarusBelgiumBermudaBoliviaBosnia and HerzegovinaBrazilBritish Virgin IslandsBulgariaBurkina FasoCameroonCanadaChadChileChinaColombiaCosta RicaCroatiaCubaCuraçaoCzech RepublicDenmarkDominican RepublicEcuadorEgyptEl SalvadorEstoniaEuropeFinlandFranceGermanyGhanaGlobalGreeceGuadeloupeGuamGuatemalaGuyanaHondurasHong KongHungaryIcelandIndiaIndonesiaIranIrelandIsraelItalyJapanJordanKenyaKoreaLatviaLebanonLetlandLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacedonia (Rep. of N.)MalaysiaMaltaMartiniqueMexicoMiddle EastNamibiaNepalNetherlandsNew ZealandNicaraguaNigeriaNorwayPakistanParaguayPeruPhilippinesPolandPortugalQatarReunion IslandRomaniaRussiaRussian FederationSaudi ArabiaSenegalSingaporeSlovakiaSloveniaSouth AfricaSouth AmericaSouth KoreaSpainSri LankaSt. MaartenSwedenSwitzerlandTaiwanThailandThe PhilippinesTrinidad & TobagoTurkeyUkraineUnited Arab EmiratesUnited KingdomUnited Kingdom of Britain & Northern IrelandUnited StatesUnknownVanuatuVenezuelaVietnam Industry AerospaceAutomotiveBiotechBuilding AutomationBusinessChemicalsCloud ProviderCommunicationsDefenseEnergy (Includes Power and Utilities)Engineering (Includes Industrial Construction)Food & BeverageGovernmentHealthcareInsuranceManufacturingMetalsMetals & MiningMiningOil & GasOtherPackagingPharmaceuticalPulp & PaperService ProviderSoftwareSteelTechnologyTransportation (Includes Logistics, Shipping, Maritime, Rail, Trucking)UnknownWater and Waste Water Threat Actor 8Base Ransomware GroupAiLock ransomware groupAkira Ransomware GangAndarielAnonymousAnonymous RoughSecAnonymous SudanAnubis Ransomware GroupAPT28AuroraBarracudaBelarusian CyberpartisansBianLian Ransomware GroupBl00dy 'bloody' Ransomware GangBlack Basta GroupBlack RewardBlack VineBlackByteBlackCat / ALPHVBlackjack groupBlackMatterBlackShrantacBlackSuitBlue LockerBrain CipherCactus ransomware gangCentral Scientific Research Institute of Chemistry and Mechanics (CNIIHM), RussiaCerber ransomware operationCicada3301 ransomware groupClop (or Cl0p) ransomware gangCold RiverConti groupCutting Sword of JusticeCyber Av3ngersCyber-PartisansDaixin TeamDark AngelsDarkSideDesordenDirewolfDoppelPaymer Ransomware GangDragonforceDunghill ransomware gangEmbargo Ransomware GangEverest Ransomware GroupFIN11Former EmployeeFulcrumSecGold DupontGunraHackers of Ukraine's military intelligence agency (HUR)HandalaHellcat ransomware gangHive Ransomware GroupINC RansomIndian Cyber Force (ICF)IndraIndustrial SpyInterlockIranIsrealIT Army of UkraineJoseph AtkinsKawa4096Killmilk/Just EvilKillnetKimsukyLapsus$LazarusLockBitLorenz ransomware gangLVLynx Ransomware GroupMedusaMoney Message ransomware gangMONTIMount LockerMysterious Team BangladeshNation State ActorNefilim Ransomware groupNempty Ransomware groupNetwalker GroupNevada Ransomware OperationNitrogenNobelium hacking groupNoEscape ransomware gangNoName057(16)PandoraPayloadPhoenixPlay, aka PlayCryptPredatory SparrowQilinRA WorldRagnar LockerRagnarok GroupRansomexxRansomHouse Extortion GroupRansomHub RaaSREvilRhysida Ransomware GroupRoyal Ransomware gangRussiaRussian Main Intelligence Directorate (GRU)Russian Security ServicesRyuk ransomware gangSafePay Ransomware GroupSalt TyphoonSandwormSarcoma GroupScatter Swine / 0ktapusScattered Lapsus$ HuntersScattered SpiderShinyHuntersSilent CrowSnatch ransomware groupSTIBNITESticky WerewolfStormStormous ransomware groupTeam Insane PKTeam OneFistTermiteThe GentlemenThe Hades ransomware gangTheUSERS007TimisoaraHackerTeam (THT)TrigonaUkrainian Cyber AllianceUNC2546UnconfirmedUnited StatesUnknownVexyVice SocietyVolt TyphoonWarlock Ransomware GroupWinntiWizard SpiderWorld Leaks, formerly Hunters InternationalWyatt A. TravnichekYanluowang ransomware groupZeroXZestix ImpactsOT (Operational Technology)IT (Information Technology)SafetyPrivacyBOTH OT and ITSearch Incidents: Disruption at Israel Postal Company after Cyberattack Last for 6+ Days04/05/2023 Israel Postal CompanyNo Malware identified Anonymous SudanOT ITIsraelRansomware Attack at Constellation Software; ALPHV Steals over 1TB Data04/03/2023 Constellation SoftwareNo Malware identified BlackCat / ALPHV ITCanadaAustrian Laboratory Instruments Manufacturer Hacked via Phishing Emails04/02/2023 Anton Paar Group Phishing Attack Black Basta Group ITAustriaPublic Transportation “Deutschlandticket” Launch in Germany Disrupted by Ransomware Attack03/31/2023 Üstra Ransomware – Unknown group or variantNo threat source identifiedGermanyRansomware Attack at Kyocera03/30/2023 Kyocera AVX (KAVX) Components CorporationNo Malware identified LockBit ITGentex Corp. Hacked; Ransomware Gang Leaks 5TB of Data03/28/2023 Gentex CorporationNo Malware identified Dunghill ransomware gang ITUnited StatesDDoS Attack Caused Brief Disruption at German weapons manufacturer Rheinmetall03/28/2023 Rheinmetall AG DDoS Attack NoName057(16) ITGermanyLumen Hit By Separate Ransomware, Malware Attacks03/27/2023 Lumen TechnologiesNo Malware identifiedNo threat source identified ITUnited StatesVice Society Disrupts Operations at CommScope and Publishes Employee PII03/27/2023 CommScopeNo Malware identified Vice SocietyOT ITUnited StatesALPHV/Blackcat Reportedly Demands ‘8 figure’ Ransom from Western Digital03/26/2023 Western DigitalNo Malware identified BlackCat / ALPHV ITCyberattack at SAF-Holland Causes Three Month Production Backlog03/25/2023 SAF-HOLLAND GroupNo Malware identifiedNo threat source identifiedOT ITGermanySwiss, German-Language Newspaper NZZ Shut Down Production03/24/2023 NZZ Mediengruppe in ZürichNo Malware identified Play, aka PlayCryptOT ITSwitzerlandMedusa Ransom Group Hacks into Gujarat Mining Company Demanding $500K Ransom03/23/2023 Gujarat Mineral Development Corporation – GMDCNo Malware identifiedNo threat source identified ITIndiaEmployee Data of Rio Tinto Group Uploaded to Dark Web03/23/2023 Rio Tinto GroupNo Malware identified Clop (or Cl0p) ransomware gang IT PrivacyAustraliaCyberattack at German Packaging Manufacturer Storopack03/21/2023 StoropackNo Malware identifiedNo threat source identified ITGermanyFerrari Hit in Ransomware Attack03/20/2023 Ferrari S.p.A.No Malware identifiedNo threat source identified ITItalyCyberattack at Puerto Rico’s Water Supply Agency did not Affect Critical Infrastructure03/19/2023 Puerto Rico Aqueduct and Sewer Authority (PRASA)No Malware identified Vice Society ITUnited StatesCyberattack at India’s National Institute of Ocean Technology03/18/2023 National Institute of Ocean Technology (NIOT)No Malware identified Medusa ITIndiaRansomware Attack at Dutch Maritime Global Logistics Company03/17/2023 Royal Dirkzwager Ransomware – unknown Play, aka PlayCrypt ITNetherlandsThird-Party Attack Hits Hitachi Energy03/17/2023 Hitachi Energy CLOPNo threat source identified ITSwitzerland123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102
