ICS Ransomware Danger Rages Despite Fewer Attacks

Dragos' Q4 2023 analysis finds that although the number of ransomware incidents impacting industrial control systems fell, remaining ransomware groups (notably LockBit, BlackCat/Black Basta and others) have become more refined and dangerous—leveraging zero-day exploits (e.g., Citrix Bleed), remote-encryption techniques, and increased collaboration and media tactics to maximize impact on ICS and critical infrastructure.