Industrial Systems Hit by New Email-Worm Threat Wave

Kaspersky’s Q4 2025 ICS telemetry documents a global surge in an email-delivered worm campaign distributing Backdoor.MSIL.XWorm (linked to phishing lures named “Curriculum Vitae-Catalina.exe”) that targeted HR/recruiting staff, peaked in Oct–Nov, and propagated by email and removable media; while overall ICS malware blocking rates declined, worm detections rose notably (worm blocking reached 1.60%), with regional and industry variances reported.