Dragos Industrial Ransomware Attack Analysis: Q2 2023

Dragos' Q2 2023 ransomware report documents a marked rise in ransomware activity targeting industrial organizations worldwide: 253 alleged incidents were observed, with 47.5% in North America and the manufacturing sector bearing 70% of impacts. The report profiles 33 active ransomware groups (notably LockBit, Clop, BianLian), details common TTPs—including zero-day MOVEit exploitation, RMM abuse, public-facing service compromise and social engineering—and highlights operational impacts (e.g., Port of Nagoya, Eisai), concluding that disruption to OT and increased damage-focused attacks are likely to continue into Q3 2023.