Threat landscape for industrial automation systems, Q1 2024

Kaspersky ICS CERT’s Q1 2024 report presents global and regional statistics on threats to ICS computers, noting a decline to 24.4% of machines with blocked malicious objects and identifying the internet, email, and removable media as key sources. Africa and South‑East Asia recorded the highest attack rates, with initial access dominated by denylisted web resources and malicious scripts/phishing, and subsequent payloads including spyware, miners (both executable and browser-based), and ransomware; worms, viruses, and AutoCAD malware showed notable regional spikes, particularly in Southeast Asia.