Threat landscape for industrial automation systems in Q3 2025

Kaspersky’s Q3 2025 ICS/OT threat statistics report shows the share of ICS computers blocking malicious objects fell to 20.1% (lowest since 2022), with regional rates from 9.2% (Northern Europe) to 27.4% (Africa); internet, email, and removable media remained primary sources as malicious scripts/phishing rose to 6.79%, malicious documents climbed (including a South America phishing wave abusing CVE-2017-11882), spyware (4.04%) and ransomware (0.17%) increased, miners declined to multiyear lows, and worms/viruses edged up, with engineering/ICS integrators and manufacturing among sectors seeing higher activity.