Dragos Industrial Ransomware Analysis: Q4 2022

During Q4 2022 Dragos tracked 189 ransomware incidents impacting industrial organizations worldwide—predominantly manufacturing—and analyzed activity from 24 ransomware groups (LockBit 3.0 responsible for 21% of incidents). The report details key trends including rewrites of ransomware in Rust, adoption of intermittent encryption to evade detection, evidence of multiple groups accessing the same victims via initial access brokers and wholesale access markets, geographic and sector breakdowns, and an assessment that ransomware will continue to pose high operational risk to industrial/OT environments.