Dragos ICS/OT Ransomware Analysis: Q1 2022

Dragos Q1 2022 analysis reports persistent and impactful ransomware activity against industrial organizations—primarily manufacturing—with Conti and Lockbit 2.0 responsible for the largest shares of tracked incidents; the report details regional and sector targeting, notable disruptive incidents (e.g., a suspected Conti attack affecting Toyota’s supplier, Hive impacting Rompetrol), emerging destructive strains (HermeticRansom), and shifts in tactics influenced by groups like LAPSUS$ and geopolitical events.