ICS STRIVE provides information on Threats, Vulnerabilities and Incidents in the manufacturing automation sector.Security Remains Everybody’s JobOT Threat Report: Physical Impacts Down, Nation-State Attacks on Rise2025 OT Cyber Threat Report2024 Threat ReportNext Filter by: Country AfricaAlbaniaAngolaArgentinaAsia-PacificAustraliaAustriaAzerbaijanBangladeshBelarusBelgiumBermudaBoliviaBosnia and HerzegovinaBrazilBritish Virgin IslandsBulgariaBurkina FasoCameroonCanadaChadChileChinaColombiaCosta RicaCroatiaCubaCuraçaoCzech RepublicDenmarkDominican RepublicEcuadorEgyptEl SalvadorEstoniaEuropeFinlandFranceGermanyGhanaGlobalGreeceGuadeloupeGuamGuatemalaGuyanaHondurasHong KongHungaryIcelandIndiaIndonesiaIranIrelandIsraelItalyJapanJordanKenyaKoreaLatviaLebanonLetlandLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacedonia (Rep. of N.)MalaysiaMaltaMartiniqueMexicoMiddle EastNamibiaNepalNetherlandsNew ZealandNicaraguaNigeriaNorwayPakistanParaguayPeruPhilippinesPolandPortugalQatarReunion IslandRomaniaRussiaRussian FederationSaudi ArabiaSenegalSingaporeSlovakiaSloveniaSouth AfricaSouth AmericaSouth KoreaSpainSri LankaSt. MaartenSwedenSwitzerlandTaiwanThailandThe PhilippinesTrinidad & TobagoTurkeyUkraineUnited Arab EmiratesUnited KingdomUnited Kingdom of Britain & Northern IrelandUnited StatesUnknownVanuatuVenezuelaVietnam Industry AerospaceAutomotiveBiotechBuilding AutomationBusinessChemicalsCloud ProviderCommunicationsDefenseEnergy (Includes Power and Utilities)Engineering (Includes Industrial Construction)Food & BeverageGovernmentHealthcareInsuranceManufacturingMetalsMetals & MiningMiningOil & GasOtherPackagingPharmaceuticalPulp & PaperService ProviderSoftwareSteelTechnologyTransportation (Includes Logistics, Shipping, Maritime, Rail, Trucking)UnknownWater and Waste Water Threat Actor 8Base Ransomware GroupAiLock ransomware groupAkira Ransomware GangAndarielAnonymousAnonymous RoughSecAnonymous SudanAnubis Ransomware GroupAPT28AuroraBarracudaBelarusian CyberpartisansBianLian Ransomware GroupBl00dy 'bloody' Ransomware GangBlack Basta GroupBlack RewardBlack VineBlackByteBlackCat / ALPHVBlackjack groupBlackMatterBlackShrantacBlackSuitBlue LockerBrain CipherCactus ransomware gangCentral Scientific Research Institute of Chemistry and Mechanics (CNIIHM), RussiaCerber ransomware operationCicada3301 ransomware groupClop (or Cl0p) ransomware gangCold RiverConti groupCutting Sword of JusticeCyber Av3ngersCyber-PartisansDaixin TeamDark AngelsDarkSideDesordenDirewolfDoppelPaymer Ransomware GangDragonforceDunghill ransomware gangEmbargo Ransomware GangEverest Ransomware GroupFIN11Former EmployeeFulcrumSecGold DupontGunraHackers of Ukraine's military intelligence agency (HUR)HandalaHellcat ransomware gangHive Ransomware GroupINC RansomIndian Cyber Force (ICF)IndraIndustrial SpyInterlockIranIsrealIT Army of UkraineJoseph AtkinsKawa4096Killmilk/Just EvilKillnetKimsukyLapsus$LazarusLockBitLorenz ransomware gangLVLynx Ransomware GroupMedusaMoney Message ransomware gangMONTIMount LockerMysterious Team BangladeshNation State ActorNefilim Ransomware groupNempty Ransomware groupNetwalker GroupNevada Ransomware OperationNitrogenNobelium hacking groupNoEscape ransomware gangNoName057(16)PandoraPayloadPhoenixPlay, aka PlayCryptPredatory SparrowQilinRA WorldRagnar LockerRagnarok GroupRansomexxRansomHouse Extortion GroupRansomHub RaaSREvilRhysida Ransomware GroupRoyal Ransomware gangRussiaRussian Main Intelligence Directorate (GRU)Russian Security ServicesRyuk ransomware gangSafePay Ransomware GroupSalt TyphoonSandwormSarcoma GroupScatter Swine / 0ktapusScattered Lapsus$ HuntersScattered SpiderShinyHuntersSilent CrowSnatch ransomware groupSTIBNITESticky WerewolfStormStormous ransomware groupTeam Insane PKTeam OneFistTermiteThe GentlemenThe Hades ransomware gangTheUSERS007TimisoaraHackerTeam (THT)TrigonaUkrainian Cyber AllianceUNC2546UnconfirmedUnited StatesUnknownVexyVice SocietyVolt TyphoonWarlock Ransomware GroupWinntiWizard SpiderWorld Leaks, formerly Hunters InternationalWyatt A. TravnichekYanluowang ransomware groupZeroXZestix ImpactsOT (Operational Technology)IT (Information Technology)SafetyPrivacyBOTH OT and ITSearch Incidents: Cyberattack at Osaka Hospital Halted Non-Emergency Services10/31/2022 Osaka HospitalNo Malware identifiedNo threat source identified ITJapanBlackbyte Group Claims Compromising Precious Metal Manufacturer in HongKong demanding $1.1M10/30/2022 Asahi Holdings / ARE Holdings, Inc.No Malware identified BlackByte IT PrivacyChinaRansomware Attack Paralyzes Vanuatu’s Government Ministries and Departments10/30/2022 Vanuatu GovernmentNo Malware identifiedNo threat source identified ITVanuatuTrains Stop for Danish Train Operator DSB10/29/2022 DSB Train OperatorNo Malware identifiedNo threat source identifiedOT ITDenmarkALMA Observatory Shutdown Impacts Scientist Worldwide.10/29/2022 ALMA ObservatoryNo Malware identifiedNo threat source identified ITChileHackers Shut Down Production at Cartonnerie Gondardennes in France10/28/2022 Cartonnerie GondardennesNo Malware identifiedNo threat source identified ITFranceMajor German Regional Energy Company Hit by Cyberattack10/26/2022 Enercity AGNo Malware identifiedNo threat source identified ITGermanyApparently Unsuccesful Cyberattack at Arvig Communications.10/25/2022 ArvigNo Malware identifiedNo threat source identified ITUnited StatesMexico’s Transportation Ministery Halts Commercial Trucking Services for 2 Months10/24/2022 Secretariat of Infrastructure, Communications and Transportation (SICT)No Malware identifiedNo threat source identified ITMexicoWorld’s Largest Copper Smelter Largely Maintains Operations after Cyberattack10/21/2022 Aurubis AGNo Malware identifiedNo threat source identified ITGermanyMichigan IT Service Provider Victim of Ransomware Attack10/20/2022 Midland Information Technology Consortium – MiTCON Ransomware – unknownNo threat source identified ITUnited StatesRansom Not Paid by Italian Chemical Producer Dollmar SpA10/19/2022 Dollmar SpANo Malware identified Ragnar Locker ITItalyRansomware Attack at Landi Renzo, an Automotive Fuel Supply System Manufacturer in Italy10/18/2022 Landi Renzo SpANo Malware identified Hive Ransomware Group ITItalyCyberattack at Global Wholesale Company METRO10/17/2022 METRO – MAKRONo Malware identifiedNo threat source identified ITAustriaFranceGermanyCyberattack at Iranian Nuclear Power Plant10/17/2022 Iranian Atomic Energy Organization (AEOI)No Malware identified Black Reward ITIranBlack Basta Hacks Systems of Engineering Firm that Designs Hundreds of US Power Stations.10/15/2022 Sargent & LundyNo Malware identified Black Basta Group ITUnited StatesIndia’s Largest Integrated Power Company, Tata Power, Hit by Cyberattack10/14/2022 Tata Power Company LimitedNo Malware identified Hive Ransomware Group ITIndiaAussie Woolworths Online Unit, MyDeal, Suffers Data Breach10/14/2022 MyDealNo Malware identifiedNo threat source identified ITAustraliaRansomware Attack Cripples Printing Systems at German Newspaper10/14/2022 Stimme MediengruppeNo Malware identifiedNo threat source identifiedOTGermanyAustralian Health Insurance Firm Medibank Hit by Ransomware Attack10/12/2022 Medibank Private LimitedNo Malware identifiedNo threat source identified ITAustralia123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102
